フリー問題

問題文

A long-running service opens a database connection pool at startup and must keep its Vault token alive for weeks so that the leases behind that pool stay valid. Which requirement rules out one of the two token types outright?

選択肢

1. The need to keep the connection pool open across a restart of the Vault active node, because batch tokens are held only in the memory of the node that issued them and are lost when that node restarts.
2. The need for a lease on the database credentials, because batch tokens cannot obtain dynamic secrets at all.
3. The need to attach more than one policy, because batch tokens accept only a single policy name.
4. The need to renew the token, because batch tokens cannot be renewed and always run on a fixed validity period.