ASP.NET Core Authentication & Authorization 2

Question 1

What is a claims-based identity in ASP.NET Core?

Accepted Answer

An identity made up of key-value pairs (claims) representing user properties

Answer

Claims are name-value pairs attached to a ClaimsIdentity that represent facts about the user, such as name, email, or roles.

Question 2

What does the IAuthorizationService interface provide in ASP.NET Core?

Accepted Answer

Programmatic authorization checks against policies or requirements

Answer

IAuthorizationService.AuthorizeAsync() allows imperative authorization checks in services or controllers beyond attribute-based authorization.

Question 3

Which class is the base for custom authorization requirements in ASP.NET Core?

Accepted Answer

IAuthorizationRequirement

Answer

IAuthorizationRequirement is a marker interface implemented by requirement classes used in custom authorization policies.

Question 4

What is an authorization policy in ASP.NET Core?

Accepted Answer

A named set of requirements that must all be met for access to be granted

Answer

Policies combine one or more IAuthorizationRequirement objects and are registered by name using AddAuthorization().

Question 5

How do you configure cookie authentication in ASP.NET Core?

Accepted Answer

services.AddAuthentication().AddCookie()

Answer

AddAuthentication() registers the auth framework and AddCookie() configures the cookie authentication handler with its options.

ASP.NET Core Practice Test