VAULT-ASSOCIATE-002 · Question #8
What are orphan tokens?
The correct answer is B. Orphan tokens are not children of their parent; therefore, orphan tokens do not expire when their. Orphan tokens are special tokens that, despite potentially being created from a parent, are explicitly detached from that parent and thus do not expire if the parent token is revoked.
Question
Options
- AOrphan tokens are tokens with a use limit so you can set the number of uses when you create
- BOrphan tokens are not children of their parent; therefore, orphan tokens do not expire when their
- COrphan tokens are tokens with no policies attached
- DOrphan tokens do not expire when their own max TTL is reached
How the community answered
(39 responses)- A3% (1)
- B95% (37)
- C3% (1)
Why each option
Orphan tokens are special tokens that, despite potentially being created from a parent, are explicitly detached from that parent and thus do not expire if the parent token is revoked.
Tokens with a use limit are called 'renewable' or 'periodic' tokens, not necessarily orphan tokens; orphan tokens primarily concern the parent-child relationship.
Orphan tokens are created with no parent or are explicitly detached from their parent token, meaning their lifecycle is independent. Unlike regular child tokens, orphan tokens will not expire or be revoked if their parent token is revoked, allowing them to persist until their own maximum time-to-live (TTL) is reached or they are explicitly revoked.
Orphan tokens can have policies attached, as policies define what a token can *do*, while the orphan status defines its relationship to a parent token's lifecycle.
Orphan tokens *do* expire when their own max TTL is reached; the 'orphan' status only means they are not tied to a parent's revocation, not that they are immortal.
Concept tested: Vault token types and lifecycle
Source: https://www.vaultproject.io/docs/concepts/tokens#orphan-tokens
Topics
Community Discussion
No community discussion yet for this question.