HashiCorp Certified: Vault Associate (002) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  The Vault Agent stores its token cache in memory only. This means: No sensitive data is written to disk. If the agent process restarts, the cache is cleared. It enhances security by reducing the chance of token leakage from storage.

• Chose C1

  Vault Agent stores its cache on disk rather than solely in memory. This design choice allows the cached tokens and lease information to persist across agent restarts. If the cache were only kept in memory (option D), any restart of the agent would result in losing that data, forcing a reauthentication. Storing the cache in an unencrypted file (by default) provides persistence and continuity, even though it means the data is stored in plaintext on disk unless additional measures are taken.

• Chose D1

  https://developer.hashicorp.com/vault/docs/agent-and-proxy/agent/caching#caching-and-renewals