What is the risk of never rotating an Instana API token?
Select an answer to reveal the explanation.
Short Explanation
You rotate an Instana token because a leaked token stays useful forever if you never replace it. Without rotation, every copy in scripts, pipelines, or config files remains exploitable indefinitely.
Full Explanation
The correct answer is the option stating that any exposure of the token remains exploitable indefinitely, and the number of places it has been copied to grows over time. Credentials spread into scripts, pipelines, configuration files, and occasionally version control. Rotation bounds the window in which any copy remains valid.
The option claiming unrotated tokens gradually accumulate additional permissions is incorrect because permissions are set when the token is created.
The option claiming the backend stops accepting requests from tokens older than a fixed age is incorrect because there is no automatic age-based rejection, which is why rotation must be scheduled deliberately.
The option claiming unrotated tokens prevent new tokens from being created is incorrect because token creation is unaffected by the age of existing tokens.
For the exam, express rotation as limiting the useful lifetime of an exposed credential.