ASP.NET Core Authentication & Authorization 3

Question 1

Which handler class must be extended to implement a custom authorization requirement handler?

Accepted Answer

AuthorizationHandler<TRequirement>

Answer

RequirementHandler<T>

Answer

PolicyHandler<TRequirement>

Answer

ClaimsAuthorizationHandler

Question 2

What does context.Succeed(requirement) do inside an authorization handler?

Accepted Answer

Marks the requirement as successfully satisfied

Answer

Returns a 200 OK response

Answer

Grants admin access to the user

Answer

Logs a successful authorization event

Question 3

Which OpenID Connect flow is recommended for server-side ASP.NET Core web applications?

Accepted Answer

Authorization Code Flow

Answer

Implicit Flow

Answer

Client Credentials Flow

Answer

Device Authorization Flow

Question 4

What does [Authorize(Policy = "MinimumAge")] require in ASP.NET Core?

Accepted Answer

A named policy 'MinimumAge' to be registered with requirements in AddAuthorization()

Answer

A MinimumAge claim in the user's JWT token

Answer

A role named MinimumAge in the database

Answer

An age filter attribute

Question 5

What is the purpose of refresh tokens in JWT authentication?

Accepted Answer

To obtain new access tokens without requiring re-authentication when the access token expires

Answer

To encrypt the access token

Answer

To revoke user sessions

Answer

To refresh the user's role claims

Question 6

Which ASP.NET Core feature allows resource-based authorization where the resource is passed to the handler?

Accepted Answer

Resource-based authorization using IAuthorizationService.AuthorizeAsync(user, resource, requirement)

Answer

Resource policies defined in appsettings.json

Answer

[AuthorizeResource] attribute on actions

Answer

ResourceFilter authorization pipeline