Authentication and Authorization in MVC

1. What is the primary role of the `[Authorize]` attribute in ASP.NET Core?

To encrypt cookies To handle user login To control access to controllers or actions To manage user registration

2. What is a significant benefit of using authorization policies in ASP.NET Core?

They provide a way to store user passwords securely They allow for fine-grained control over authorization based on conditions They enhance the security of user sessions They automatically create roles for users

3. Why is it important to implement a per-record ownership check in your service layer?

To improve database performance To prevent unauthorized access to specific records To facilitate user registration To enhance cookie security

4. What must you consider when designing cookie authentication for a web application?

Cookies should be stored in plain text for security The session lifetime should be set very long Cookies should be marked as Secure and HttpOnly Cookies can be shared across different domains

Continue: OWASP for MVC Developers → Review this lesson Retake quiz