CASE CASE Identity & Access Management 2 — Questions and Answers
Question 1: What is OAuth 2.0 primarily designed for?
- Encrypting data transmitted between services
- Authorization delegation allowing third-party applications to access user resources without exposing credentials (Correct answer)
- Storing and managing user passwords securely
- Establishing mutual TLS authentication between services
Correct answer: Authorization delegation allowing third-party applications to access user resources without exposing credentials
OAuth 2.0 is an authorization framework that enables applications to obtain scoped, delegated access to user resources without handling the user's credentials.
Question 2: What is the distinction between authentication and authorization?
- Authentication determines resource access; authorization verifies identity
- Authentication verifies who you are; authorization determines what you are permitted to do (Correct answer)
- Both terms describe the same identity verification process
- Authorization is always performed before authentication
Correct answer: Authentication verifies who you are; authorization determines what you are permitted to do
Authentication confirms a user's identity, while authorization determines which resources and actions that verified identity is permitted to access.
Question 3: What does Privileged Access Management (PAM) address?
- Tracking standard user login frequency and patterns
- Securing, managing, and monitoring accounts with elevated administrative permissions (Correct answer)
- Managing password storage for regular user accounts
- Auditing network packet traffic for anomalies
Correct answer: Securing, managing, and monitoring accounts with elevated administrative permissions
PAM solutions control and audit privileged account access to critical infrastructure, reducing risk from insider threats and compromised administrative credentials.
Question 4: What is a JSON Web Token (JWT)?
- A database field encryption standard for JSON data
- A compact, self-contained token for securely transmitting signed claims between parties (Correct answer)
- A firewall rule configuration format
- A type of X.509 digital certificate
Correct answer: A compact, self-contained token for securely transmitting signed claims between parties
A JWT is a compact, digitally signed token encoding claims that can be verified because the signature ensures tamper detection.
Question 5: What does OpenID Connect (OIDC) add on top of OAuth 2.0?
- A firewall authentication standard
- An identity and authentication layer providing standardized user identity via ID tokens (Correct answer)
- An encryption standard for REST API payloads
- A network access control protocol
Correct answer: An identity and authentication layer providing standardized user identity via ID tokens
OIDC extends OAuth 2.0 with a standardized authentication layer, introducing ID tokens that carry verified user identity claims.
Question 6: What is the purpose of account provisioning?
- Encrypting stored user account credentials
- Creating, configuring, and assigning user accounts and access rights when users join or change roles (Correct answer)
- Monitoring and alerting on failed authentication attempts
- Backing up user account data to disaster recovery systems
Correct answer: Creating, configuring, and assigning user accounts and access rights when users join or change roles
Account provisioning is the process of creating and configuring user accounts with appropriate permissions aligned to the user's role.
CASE CASE Identity & Access Management 2
What is OAuth 2.0 primarily designed for?