A role assignment was removed but the application still succeeds. What explains this?

1. A RBAC never revokes
2. ✓ B The previously issued access token remains valid until it expires (correct answer)
3. C The role was reassigned automatically
4. D Deny assignments apply

Shortcut: Tokens are bearer credentials valid until expiry, typically up to an hour. Revocation takes effect on the next token acquisition, which is why continuous access evaluation exists for some scenarios.