Auth Patterns.

Authentication and authorization patterns. Covers 12 sub-skills.

• Auth Patterns · 1 of 3

  OpenID Connect

  Which scope is required in every OpenID Connect authentication request?

  AopenidBidentityCemailDprofile

• Auth Patterns · 2 of 3

  Password Hashing & Storage

  What is the maximum input length limitation of bcrypt?

  ANo limitB256 bytesC72 bytesD128 characters

• Auth Patterns · 3 of 3

  Multi-Factor Authentication

  Why are FIDO2 security keys generally stronger than SMS OTP for MFA?

  AThey resist phishing and SIM-swap takeoverBThey remove need for account recovery flowsCThey are valid only on managed devicesDThey require no cryptographic challenge