Which feature can be used to limit application consumption to a particular group of API proxy resources?

Your API generates tokens to authenticate users. You have the following requirements
1. Limited token lifetime.
2. Managed key rotation.
3. Self-verifiable content.
4 Compact data representation
5. Refresh without new challenge.
You plan to use SAML2 Which two of the above-listed requirements are satisfied by using SAML2?

Which describe OAuth 2.0 Refresh Tokens'?

Which Apigee product feature can be used to host and version your API documentation'?

When is it appropriate to use query parameters in RESTful API design? Select all that are correct