Which statement is true about an orphan token?

An orphan token is explicitly created without a parent token, meaning its expiration is governed solely by its own time-to-live (TTL) and not tied to the expiration or revocation of a parent token. This independence ensures it can persist even if the originating token is no longer valid.

Orphan tokens are persisted by Vault like any other token, allowing them to be retrieved and used after creation until they expire or are revoked.

Orphan tokens, like all Vault tokens, are subject to a maximum time-to-live (TTL) to enforce security best practices and prevent indefinite validity.

Orphan tokens do not inherently have a use limit unless configured with one, and their primary characteristic is their independent lifecycle, not usage restriction.