# What does setting presence: REQUIRED on a jwtRules entry of an Istio RequestAuthentication do?

Istio, Medium (Advanced), Security. https://k8wiz.com/uquiz/what-does-setting-presence-required-on-a-jwtrules-entry-of-an-istio-requestauthentication-do

- A. Requests without that rule's token get a 401, even if another rule's token is valid
- B. Requests without that rule's token get a 403 from the AuthorizationPolicy
- C. The rule's token is validated first, before any other rule is checked
- D. Requests with no token at all are rejected, but one valid token is enough

**Answer:** Requests without that rule's token get a 401, even if another rule's token is valid

**Explanation:** The presence field, added in Istio 1.32, defaults to OPTIONAL, where a missing token is allowed as long as no invalid token is present. With REQUIRED, the token must be present and valid or the request is rejected with 401 Unauthorized. Marking every rule REQUIRED enforces that all configured tokens arrive together.