AZ400-Q: govern a personal access token
A legacy integration requires a PAT temporarily. Which configuration minimizes risk?
- A) No expiry and full organization scope.
- B) Store it in repository source for easy rotation.
- C) Share one token across all integrations.
- D) Minimum scopes, short expiration, secure storage, named ownership, and a migration plan. ✓ Answer: D. A PAT is a credential; constrain it and plan to remove it. Why not the others: Broad, embedded, shared, indefinite tokens are high risk.