CASE CASE Identity & Access Management 2

Question 1

What is OAuth 2.0 primarily designed for?

Accepted Answer

Authorization delegation allowing third-party applications to access user resources without exposing credentials

Answer

OAuth 2.0 is an authorization framework that enables applications to obtain scoped, delegated access to user resources without handling the user's credentials.

Question 2

What is the distinction between authentication and authorization?

Accepted Answer

Authentication verifies who you are; authorization determines what you are permitted to do

Answer

Authentication confirms a user's identity, while authorization determines which resources and actions that verified identity is permitted to access.

Question 3

What does Privileged Access Management (PAM) address?

Accepted Answer

Securing, managing, and monitoring accounts with elevated administrative permissions

Answer

PAM solutions control and audit privileged account access to critical infrastructure, reducing risk from insider threats and compromised administrative credentials.

Question 4

What is a JSON Web Token (JWT)?

Accepted Answer

A compact, self-contained token for securely transmitting signed claims between parties

Answer

A JWT is a compact, digitally signed token encoding claims that can be verified because the signature ensures tamper detection.

Question 5

What does OpenID Connect (OIDC) add on top of OAuth 2.0?

Accepted Answer

An identity and authentication layer providing standardized user identity via ID tokens

Answer

OIDC extends OAuth 2.0 with a standardized authentication layer, introducing ID tokens that carry verified user identity claims.

(CASE) Certified Application Security Engineer Practice Test

(CASE) Certified Application Security Engineer Practice Test

CASE CASE Identity & Access Management 2