Which of the following statements explains the benefit of response wrapping? Choose TWO correct answers.

Response wrapping encapsulates the secret within a single-use, time-limited token, which means the sensitive data itself is only exposed for a very brief period when the token is unwrapped, thus limiting the window of exposure.

Response wrapping is a security feature for transit and retrieval of secrets, distinct from secret versioning, which is a specific capability of the KV secrets engine version 2.

Vault's master key is protected through unsealing mechanisms, cryptographic key splitting (e.g., Shamir's Secret Sharing), and secure storage, which are unrelated to response wrapping.

When a secret is response-wrapped, Vault returns a wrapping token instead of the actual secret content. This token is a secure reference, meaning the sensitive secret material itself is never directly transmitted across the network, improving security during transit.

While a wrapping token might be smaller than some large secrets, the primary benefit of response wrapping is not to limit the size of data transmitted, but rather to enhance the security and integrity of secret delivery.