Authentication Strategy Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Design Technical Architecture

What you'll be asked

  1. Which of the following is the most secure method for storing user passwords in a database?
  2. When designing a stateless authentication system for a distributed microservices architecture, which token-based approach is considered industry standard?
  3. What is the primary purpose of implementing an 'OAuth 2.0 Authorization Code Flow' instead of the 'Implicit Flow'?
  4. In a Single Page Application (SPA) using an Identity Provider (IdP) via OIDC, where should the access token be stored to best mitigate Cross-Site Scripting (XSS) attacks?
  5. When implementing a 'Refresh Token' rotation strategy, what is the critical security benefit achieved?

Answers and explanations come after you submit.