Spring Security · interview question
Why is separating authentication from authorization important in a real system?
Multiple choiceEasychapter-17-curatedpremiumspring-securityfilter-chain
Answer and explanation
Correct answer
A. Authentication identifies who the caller is; authorization decides what that caller may do
Why
A system first proves who the caller is, then decides whether that caller is allowed to perform the requested action. Mixing those concerns leads to shallow security checks.
Test yourself on Spring Security
A free test with instant, explained results. No account needed.
More Spring Security questions
- What HTTP response code does Spring Security typically return for unauthorized requests?
- In a stateless JWT token, what component ensures the token's integrity and prevents tampering?
- How does Spring Security handle a request identified as a potential CSRF attack?
- What does Spring Security's Authentication Filter primarily do?
- In the context of BCrypt, what does increasing the work factor achieve?
- Which of the following filters in the Spring Security Filter Chain is primarily responsible for ensuring that requests…