Examkin

Soru

Zorluk: KolayIdentity and Access Management Architecture

An organization is modernizing its identity and access management (IAM) architecture to support modern web applications and API access controls. Which of the following protocols should the security team implement to provide federated user identity authentication and delegated API authorization? (Select TWO.)

  1. OpenID Connect (OIDC)Cevap
  2. OAuth 2.0Cevap
  3. C
    Remote Authentication Dial-In User Service (RADIUS)
  4. D
    IPsec Virtual Private Network (VPN)

Cevap

The correct open standards are OpenID Connect (OIDC) for identity authentication and OAuth 2.0 for API authorization.
OpenID Connect (OIDC) and OAuth 2.0 work together in modern identity architectures. OIDC provides user authentication by returning an ID token, while OAuth 2.0 handles authorization by granting access tokens for API requests.

Adım Adım Çözüm

1
Identify the standard required for user authentication in web and federated architectures.
OpenID Connect (OIDC) extends OAuth 2.0 by introducing JSON Web Tokens (JWTs) called ID tokens to verify user identity.
OIDC is designed specifically as the authentication protocol layer.
2
Identify the framework required for delegated API authorization.
OAuth 2.0 issues access tokens that grant applications permission to access protected APIs without sharing passwords.
OAuth 2.0 governs access control and authorization decisions.

Anahtar Kavram

Federated Authentication and API Authorization Protocols
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru