AuthN vs AuthZ Under Questioning

1. What is the primary difference between authentication and authorization?

Authentication is what you are allowed to do Authorization is who you are Authentication is who you are Authorization is a method of signing out

2. In the context of the lesson, which authentication method is recommended for a server-rendered MVC application?

JWT Cookies OAuth Basic Authentication

3. What does policy-based authorization enable in an ASP.NET Core application?

Scattering role names throughout the codebase Defining authorization rules in one place Directly checking user roles in views Using JWTs for authorization

4. For a user to see records only for their region, which method of authorization is appropriate?

Role-based authorization Policy-based authorization Resource-based authorization JWT authorization

Continue: The OWASP Walkthroughs → Review this lesson Retake quiz