Exam HCVA0-003 Topic 8 Question 279 Discussion

When a client authenticates to Vault through the API, Vault returns a client token. That token is then used to authorize later API requests. Unlike the CLI and UI, the raw HTTP API does not automatically remember or reuse the token for the client. The caller must explicitly send the token in the request header, normally as X- Vault-Token: < token > or as a bearer token. Option A is false because Vault authentication can be performed through the API. Option B is false because most useful Vault API endpoints require authentication. Option C is wrong because deleting the token would prevent further authenticated requests. HashiCorp's token authentication documentation confirms that API authentication requires passing the token in the request header.