CA1-005: CompTIA SecurityXDemo

By CompTIA · Question Mode

QuestionQ94

Security Architecture

SIMULATION -

You must integrate a new B2B client application into an existing OAuth workflow that meets these requirements:

  • The application does not need to know users’ credentials.
  • An approval interaction between users and the HTTP service must be orchestrated.
  • The application must have limited access to users’ data.

INSTRUCTIONS -

Use the drop-down menus to choose the action items for the appropriate locations. Fill in every placeholder.

To return the simulation to its initial state at any time, select Reset All.

Select
Resource server:
Authorization server:
B2B client application:
Explanation

OAuth delegates authorization without exposing the resource owner’s credentials to the client. The resource owner authorizes the client at the authorization server; that server issues an access token; then the client uses the token to obtain limited, scope-controlled access from the resource server.

Community Discussion

No comments yet. Be the first to start the discussion!