08. Authentication without Authorization
Authorization without Authentication
Authentication or Authorization… or Both?
QUIZ QUESTION::
Label these actions based on whether they require authorization, authentication or both.
ANSWER CHOICES:
Action |
Security Method |
---|---|
Both |
|
Authorization |
|
Authentication |
|
Authorization |
|
Authentication |
|
Both |
SOLUTION:
Action |
Security Method |
---|---|
Both |
|
Authorization |
|
Authorization |
|
Authentication |
|
Authorization |
|
Authorization |
|
Authentication |
|
Both |
Session Hijacking occurs when an attacker gains access to a users session cookie and can make requests upon their behalf.