HashiCorp Certified: Vault Associate (002) — Question 51

Which of these options does not allow the creation of a root token?

Answer options

• A. By using batch tokens
• B. By using another root token
• C. The initial root token generated at the vault operator init time
• D. By using vault operator generate-root with the permission of a quorum of unseal key holders

Correct answer: A

Explanation

The correct answer is A because batch tokens are created for specific purposes and do not have the authority to generate a root token. Options B, C, and D all involve methods that can lead to the creation of a root token, either by leveraging existing root tokens or through the initial setup process.