1. What is Authentication ? Junior A. a named, reusable set of requirements that an endpoint references to express more complex access rules B. the process of establishing who a caller is by verifying presented credentials C. the process of deciding whether an already-identified caller is permitted to perform a requested operation D. a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity
2. Which term means: "the process of establishing who a caller is by verifying presented credentials"? Junior A. Authentication B. [Authorize] C. Authorization policy D. Authorization
3. Which statement is correct? Junior A. Authentication — the process of establishing who a caller is by verifying presented credentials B. Authentication — a named, reusable set of requirements that an endpoint references to express more complex access rules C. Authentication — a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity D. Authentication — the process of deciding whether an already-identified caller is permitted to perform a requested operation
4. What is Authorization ? Junior A. the process of establishing who a caller is by verifying presented credentials B. an attribute that restricts an endpoint so only authenticated, and optionally role- or policy-matching, callers may reach it C. a named, reusable set of requirements that an endpoint references to express more complex access rules D. the process of deciding whether an already-identified caller is permitted to perform a requested operation
5. Which term means: "the process of deciding whether an already-identified caller is permitted to perform a requested operation"? Junior A. Authentication B. Authorization C. [Authorize] D. JWT bearer
6. Which statement is correct? Junior A. Authorization — the process of establishing who a caller is by verifying presented credentials B. Authorization — the process of deciding whether an already-identified caller is permitted to perform a requested operation C. Authorization — a named, reusable set of requirements that an endpoint references to express more complex access rules D. Authorization — a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity
7. What is [Authorize] ? Mid A. an attribute that restricts an endpoint so only authenticated, and optionally role- or policy-matching, callers may reach it B. a named, reusable set of requirements that an endpoint references to express more complex access rules C. the process of establishing who a caller is by verifying presented credentials D. a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity
8. Which term means: "an attribute that restricts an endpoint so only authenticated, and optionally role- or policy-matching, callers may reach it"? Mid A. Authorization B. [Authorize] C. Authorization policy D. Authentication
9. Which statement is correct? Mid A. [Authorize] — the process of establishing who a caller is by verifying presented credentials B. [Authorize] — a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity C. [Authorize] — an attribute that restricts an endpoint so only authenticated, and optionally role- or policy-matching, callers may reach it D. [Authorize] — a named, reusable set of requirements that an endpoint references to express more complex access rules
10. What is JWT bearer ? Mid A. a named, reusable set of requirements that an endpoint references to express more complex access rules B. an attribute that restricts an endpoint so only authenticated, and optionally role- or policy-matching, callers may reach it C. the process of deciding whether an already-identified caller is permitted to perform a requested operation D. a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity
11. Which term means: "a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity"? Mid A. Authorization B. JWT bearer C. [Authorize] D. Authorization policy
12. Which statement is correct? Mid A. JWT bearer — the process of deciding whether an already-identified caller is permitted to perform a requested operation B. JWT bearer — an attribute that restricts an endpoint so only authenticated, and optionally role- or policy-matching, callers may reach it C. JWT bearer — a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity D. JWT bearer — a named, reusable set of requirements that an endpoint references to express more complex access rules
13. What is Authorization policy ? Senior A. a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity B. a named, reusable set of requirements that an endpoint references to express more complex access rules C. the process of deciding whether an already-identified caller is permitted to perform a requested operation D. the process of establishing who a caller is by verifying presented credentials
14. Which term means: "a named, reusable set of requirements that an endpoint references to express more complex access rules"? Senior A. Authorization policy B. Authorization C. Authentication D. [Authorize]
15. Which statement is correct? Senior A. Authorization policy — the process of deciding whether an already-identified caller is permitted to perform a requested operation B. Authorization policy — a named, reusable set of requirements that an endpoint references to express more complex access rules C. Authorization policy — a token-based scheme where a signed self-contained credential is sent in the Authorization header to prove identity D. Authorization policy — the process of establishing who a caller is by verifying presented credentials