1. What is Authentication ? Junior A. the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation B. a compact, self-contained signed token carrying claims, often used for stateless authentication across requests C. the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules D. the process of verifying who a principal is, typically by checking credentials
2. Which term means: "the process of verifying who a principal is, typically by checking credentials"? Junior A. PasswordEncoder B. OAuth2 C. Authentication D. Authorization
3. Which statement is correct? Junior A. Authentication — the process of verifying who a principal is, typically by checking credentials B. Authentication — the process of deciding whether an already-identified principal may access a resource or action C. Authentication — the delegated authorization standard letting an app obtain limited access to a user's resources without their password D. Authentication — a compact, self-contained signed token carrying claims, often used for stateless authentication across requests
4. What is Authorization ? Junior A. the delegated authorization standard letting an app obtain limited access to a user's resources without their password B. the process of deciding whether an already-identified principal may access a resource or action C. a compact, self-contained signed token carrying claims, often used for stateless authentication across requests D. the process of verifying who a principal is, typically by checking credentials
5. Which term means: "the process of deciding whether an already-identified principal may access a resource or action"? Junior A. SecurityFilterChain B. PasswordEncoder C. Authorization D. OAuth2
6. Which statement is correct? Junior A. Authorization — a compact, self-contained signed token carrying claims, often used for stateless authentication across requests B. Authorization — the delegated authorization standard letting an app obtain limited access to a user's resources without their password C. Authorization — the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation D. Authorization — the process of deciding whether an already-identified principal may access a resource or action
7. What is SecurityFilterChain ? Mid A. the process of deciding whether an already-identified principal may access a resource or action B. the process of verifying who a principal is, typically by checking credentials C. the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation D. the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules
8. Which term means: "the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules"? Mid A. OAuth2 B. Authorization C. PasswordEncoder D. SecurityFilterChain
9. Which statement is correct? Mid A. SecurityFilterChain — the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation B. SecurityFilterChain — the process of verifying who a principal is, typically by checking credentials C. SecurityFilterChain — the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules D. SecurityFilterChain — the process of deciding whether an already-identified principal may access a resource or action
10. What is PasswordEncoder ? Mid A. the process of deciding whether an already-identified principal may access a resource or action B. the delegated authorization standard letting an app obtain limited access to a user's resources without their password C. the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation D. a compact, self-contained signed token carrying claims, often used for stateless authentication across requests
11. Which term means: "the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation"? Mid A. Authorization B. JWT C. Authentication D. PasswordEncoder
12. Which statement is correct? Mid A. PasswordEncoder — a compact, self-contained signed token carrying claims, often used for stateless authentication across requests B. PasswordEncoder — the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation C. PasswordEncoder — the delegated authorization standard letting an app obtain limited access to a user's resources without their password D. PasswordEncoder — the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules
13. What is JWT ? Senior A. the process of deciding whether an already-identified principal may access a resource or action B. a compact, self-contained signed token carrying claims, often used for stateless authentication across requests C. the process of verifying who a principal is, typically by checking credentials D. the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules
14. Which term means: "a compact, self-contained signed token carrying claims, often used for stateless authentication across requests"? Senior A. Authorization B. PasswordEncoder C. SecurityFilterChain D. JWT
15. Which statement is correct? Senior A. JWT — the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation B. JWT — the delegated authorization standard letting an app obtain limited access to a user's resources without their password C. JWT — a compact, self-contained signed token carrying claims, often used for stateless authentication across requests D. JWT — the process of deciding whether an already-identified principal may access a resource or action
16. What is OAuth2 ? Senior A. the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation B. the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules C. the process of verifying who a principal is, typically by checking credentials D. the delegated authorization standard letting an app obtain limited access to a user's resources without their password
17. Which term means: "the delegated authorization standard letting an app obtain limited access to a user's resources without their password"? Senior A. Authorization B. OAuth2 C. JWT D. SecurityFilterChain
18. Which statement is correct? Senior A. OAuth2 — the bean defining the ordered chain of servlet filters that intercept requests to enforce protection rules B. OAuth2 — the delegated authorization standard letting an app obtain limited access to a user's resources without their password C. OAuth2 — a compact, self-contained signed token carrying claims, often used for stateless authentication across requests D. OAuth2 — the abstraction for one-way hashing and verifying credentials, with BCrypt as the common implementation