If the same user accesses two different applications, () application tokens will be generated.

Question

Options

• A2
• B1

• A
  71% (44)
• B
  29% (18)

Explanation

Option A is correct because application tokens are generated per application, not per user session. When a user accesses two different applications, each application independently authenticates the user and issues its own token, resulting in two separate tokens - one for each application. This design is intentional: tokens are scoped to a specific application to limit access and enforce security boundaries, so a token issued for App A cannot be used to access App B.

Option B is wrong because a single token would imply cross-application access, which violates the principle of least privilege and would create a security risk if that token were compromised.

Memory tip: Think of application tokens like physical key cards - if you work in two buildings, you need a separate key card for each building, even though you are the same person entering both.

No community discussion yet for this question.