Skills101
← All practice quizzes

Quiz: Security and JWT

5 questionsNo time limitPass: 60%+10 XP on first pass

Secure a REST API the modern way: password hashing, a login endpoint that issues a signed JWT, Spring Security's OAuth2 resource server to check Bearer tokens, role-based URL rules, and reading the logged-in user — all tested.

Log in to take the quiz

Free account · see your score, answers and explanations, earn XP

  1. Question 1

    A logged-in STUDENT tries to delete a course and is refused. Which status is correct?

  2. Question 2

    Which statement about a JWT's payload is TRUE?

  3. Question 3

    Why is CSRF protection disabled in this API?

  4. Question 4

    How should passwords be stored?

  5. Question 5

    Where should the enrolling student's identity come from?