Which of the following is NOT a valid way in which a lease can be revoked in Vault?
Using the user interface (UI)
Automatically when the TTL or Max-TTL expires
Using the API to call the /v1/sys/leases endpoint
Via the CLI using the vault token command
Comprehensive and Detailed in Depth Explanation:
Leases manage dynamic secrets’ lifecycles. Let’s check:
A:UI allows lease revocation. Valid.
B:TTL expiration auto-revokes leases. Valid.
C:API endpoint revokes leases. Valid.
D:vault token manages tokens, not leases directly. Invalid.
Overall Explanation from Vault Docs:
“Leases can be revoked via API, UI, CLI (vault lease revoke), or TTL expiry… vault token is for tokens.”
Submit