Which of the following token attributes can be used to renew a token in Vault (select two)?
Correct Answer: B,D
Comprehensive and Detailed in Depth Explanation:
Token renewal extends a token's TTL. Let's evaluate:
* A: TTL- Defines expiration time, not used for renewal. Incorrect.
* B: Token ID- The token's unique identifier; can be specified to renew it (e.g., vault token renew
<token-id>). Correct.
* C: Identity policy- Relates to access control, not renewal. Incorrect.
* D: Token accessor- A unique identifier for operations like renewal without exposing the token (e.g., vault token renew -accessor <accessor>). Correct.
Overall Explanation from Vault Docs:
"Tokens can be renewed with vault token renew using either the token ID or accessor... TTL is not an attribute for renewal." Reference:https://developer.hashicorp.com/vault/docs/commands/token/renew#token-renew