User tokens and application tokens are valid by default ().

Question

Options

• A1h
• B24h
• C2h

• A
  19% (9)
• B
  11% (5)
• C
  70% (33)

Explanation

Option C (2h) is correct because user tokens and application tokens in this system are configured with a default validity period of 2 hours, balancing security (short enough to limit exposure if compromised) with usability (long enough for typical work sessions).

Option A (1h) is incorrect - while a 1-hour window is common in some OAuth implementations, it is shorter than the actual default and would force more frequent re-authentication than the platform intends. Option B (24h) is incorrect - a 24-hour default would be a much more permissive and less secure choice, typically reserved for long-lived tokens or refresh tokens rather than standard access tokens.

Memory tip: Think "2 hours = one standard work block." The default is just long enough for a focused task session but short enough to enforce periodic re-authentication - a "2-hour meeting" is the sweet spot between too short (1h) and too long (24h).

No community discussion yet for this question.