Authorization Design Quiz

What you'll be asked

1. Which of the following best describes the principle of 'Least Privilege' in authorization design?
2. When designing an architecture using Role-Based Access Control (RBAC), what is the primary benefit of assigning permissions to roles rather than directly to individual users?
3. In a distributed microservices architecture, which pattern is most effective for centralizing authorization decisions while maintaining low latency?
4. You are designing an application where users need access to documents based on specific ownership and department metadata. Which authorization model is most appropriate?
5. When implementing 'Claims-Based Authorization' using JWTs (JSON Web Tokens) in a high-security environment, which of the following practices is considered a critical security flaw?

Answers and explanations come after you submit.