Which of the following are valid types of tokens available in Vault? (Select five)
A.
Primary token
B.
Batch token
C.
Orphan service token
D.
Service token
E.
Root token
F.
Periodic service token
The Answer Is:
B, C, D, E, F
This question includes an explanation.
Explanation:
Comprehensive and Detailed In-Depth Explanation:
Vault supports several token types, each with distinct characteristics:
B. Batch token: "Batch tokens are encrypted binary large objects (blobs) that carry just enough information for authentication." They are lightweight and non-renewable.
C. Orphan service token: "Orphan tokens are not children of their parent; therefore, do not expire when their parent does." A valid subtype of service tokens.
D. Service token: "Service token is the general token that most people talk about when referring to a token in Vault." The standard token type.
E. Root token: "Root tokens are the most powerful tokens in Vault and have full control." Created during initialization.
F. Periodic service token: "Periodic service tokens have a TTL, but no max TTL," renewing automatically for long-running tasks.
Incorrect Option:
A. Primary token: "Not a valid token type in Vault." No such term exists in Vault’s documentation.
These token types cater to various use cases, from ephemeral to privileged access.