Which statement best summarises API token practice for Instana automation?
Select an answer to reveal the explanation.
Short Explanation
You want one token per automation, with only the rights it needs, stored as a secret, and rotated on a schedule. Each part covers a failure the others do not.
Full Explanation
The correct practice is to create a dedicated token per automation, grant only the permissions that automation needs, keep the value in a secret store, and rotate it on a schedule. Per-automation tokens allow independent revocation, minimal permissions bound the impact of exposure, secret storage limits who can obtain the value, and rotation bounds how long any leak stays useful.
Sharing one broadly permissioned token across all automations is incorrect because a shared token cannot be revoked without breaking every automation at once, and its permissions must be the union of everything anyone needs.
Using personal tokens for automation and relying on individual accountability is incorrect because personal tokens conflate human and machine access and break both auditing and clean revocation.
Creating tokens freely and relying on activity monitoring rather than on scoping or rotation is incorrect because monitoring detects misuse after it has begun and is no substitute for preventing it.
For the exam, be able to name all four practices together.