ASP.NET Core Authentication & Authorization

Question 1

Which attribute restricts access to authenticated users only in ASP.NET Core?

Accepted Answer

[Authorize]

Answer

[Authenticated]

Answer

[RequireLogin]

Answer

[Protected]

Question 2

What does [AllowAnonymous] do when placed on an action inside an [Authorize] controller?

Accepted Answer

Overrides the controller-level authorization, allowing unauthenticated access to that action

Answer

Has no effect inside an [Authorize] controller

Answer

Requires anonymous authentication only

Answer

Logs anonymous access for audit purposes

Question 3

Which middleware must be added before UseAuthorization() for authentication to work?

Accepted Answer

UseAuthentication()

Answer

UseIdentity()

Answer

UseLogin()

Answer

UseJwt()

Question 4

What is the purpose of JWT Bearer authentication in ASP.NET Core APIs?

Accepted Answer

To validate tokens sent in the Authorization header and set the user identity

Answer

To store user sessions on the server

Answer

To redirect users to a login page

Answer

To encrypt the request body

Question 5

Which method adds ASP.NET Core Identity to the application?

Accepted Answer

services.AddIdentity<TUser, TRole>()

Answer

services.UseIdentity()

Answer

services.RegisterIdentity()

Answer

services.AddUserManagement()

Question 6

What does [Authorize(Roles = "Admin")] do in ASP.NET Core?

Accepted Answer

Restricts the action to users who have the Admin role claim

Answer

Creates a new role named Admin

Answer

Requires the Admin policy to be defined

Answer

Restricts access to the admin area only