MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

OpenID is primarily used for
a. Authorization
b. Authentication
c. Encryption
d. Hashing
Answer: b. Authenticationhuntress
OpenID Connect is built on top of
a. OAuth 1.0
b. OAuth 2.0
c. SAML
d. Kerberos
Answer: b. OAuth 2.0huntress
In cybersecurity, OpenID Connect helps with
a. Protecting files
b. Verifying user identity
c. Encrypting traffic
d. Monitoring networks
Answer: b. Verifying user identitycibersafety
The component responsible for verifying identities in OpenID Connect is called the
a. Resource Server
b. Authorization Server
c. OpenID Provider
d. Client Application
Answer: c. OpenID Providerhuntress
The main advantage of OpenID is
a. Passwordless login
b. Centralized user authentication
c. Encrypted file storage
d. Offline access control
Answer: b. Centralized user authenticationhuntress
The ID token in OpenID Connect mainly serves to
a. Authorize an app
b. Identify the authenticated user
c. Encrypt data
d. Retrieve passwords
Answer: b. Identify the authenticated userexamradar
What format is usually used for OpenID ID tokens?
a. XML
b. JSON Web Token (JWT)
c. HTML
d. YAML
Answer: b. JSON Web Token (JWT)huntress
The OpenID Connect protocol was designed to replace
a. IPsec
b. OpenID 1.0 and 2.0
c. HTTPS
d. SSH
Answer: b. OpenID 1.0 and 2.0huntress
In OpenID Connect, the app that requests authentication from a provider is the
a. Resource Owner
b. Relying Party
c. Authentication Client
d. Token Broker
Answer: b. Relying Partyhuntress
A key security measure in OpenID is preventing
a. Replay attacks
b. Keylogging
c. Data compression
d. Packet injection
Answer: a. Replay attacksexamradar
Which parameter helps OpenID prevent replay attacks?
a. code_verifier
b. nonce
c. session_token
d. redirect_uri
Answer: b. nonceexamradar
OpenID Connect allows
a. Single Sign-On (SSO)
b. Token revocation only
c. Email encryption
d. Malware detection
Answer: a. Single Sign-On (SSO)huntress
The OpenID Connect standard defines which type of flow for web applications?
a. Token Flow
b. Authorization Code Flow
c. Session Flow
d. Hash Flow
Answer: b. Authorization Code Flowstackoverflow
The ID token in OpenID must be
a. Signed and optionally encrypted
b. Plain text
c. Encrypted only
d. Randomly generated without signing
Answer: a. Signed and optionally encryptedcibersafety
The OpenID Discovery process allows clients to
a. Find user profiles manually
b. Automatically obtain provider configuration metadata
c. Transfer passwords securely
d. Generate random session IDs
Answer: b. Automatically obtain provider configuration metadataopenid
Which of the following best describes “OpenID Provider”?
a. A service that issues tokens verifying identity
b. A certificate authority
c. A local authentication database
d. A firewall controller
Answer: a. A service that issues tokens verifying identityhuntress
The “state” parameter in OpenID is used to
a. Synchronize user profiles
b. Prevent CSRF attacks
c. Notify resource servers
d. Encrypt access tokens
Answer: b. Prevent CSRF attacksexamradar
Dynamic Client Registration in OpenID can cause vulnerabilities if
a. Not authenticated
b. Done over UDP
c. Using XML
d. Lacking session expiry
Answer: a. Not authenticatedportswigger
OpenID Connect uses HTTPS to
a. Encrypt server configurations
b. Protect token exchanges
c. Block malware
d. Authenticate firewalls
Answer: b. Protect token exchangescibersafety
The “openid” scope in OpenID Connect indicates
a. Request for device info
b. Request for authentication ID token
c. Access to protected API resources
d. Token refreshing
Answer: b. Request for authentication ID tokenhuntress
ID tokens are primarily intended for
a. Resource access
b. Authentication of end-user
c. Authorization delegation
d. Key management
Answer: b. Authentication of end-userexamradar
OpenID Connect adds an identity layer on top of
a. HTTPS
b. SAML
c. OAuth 2.0
d. SSH
Answer: c. OAuth 2.0huntress
The “userinfo” endpoint allows clients to
a. Retrieve user profile data
b. Manage token lifetimes
c. Validate signatures
d. Configure OpenID providers
Answer: a. Retrieve user profile datahuntress
OpenID Connect helps organizations comply with regulations like
a. GDPR
b. HIPAA only
c. ISO 27001
d. PCI DSS
Answer: a. GDPRcibersafety
A good implementation of OpenID Connect must
a. Verify ID token signatures
b. Skip nonce validation
c. Use HTTP connections
d. Disable session timeouts
Answer: a. Verify ID token signaturescibersafety
What is a potential risk if OpenID dynamic client registration is unsecured?
a. Phishing
b. SSRF exploitation
c. Denial of Service
d. Man-in-the-middle attacks
Answer: b. SSRF exploitationportswigger
OpenID Connect primarily targets
a. Authorization
b. Authentication
c. Cryptography
d. Access control enforcement
Answer: b. Authenticationhuntress
The basic structure of an ID token in OpenID consists of
a. Header, Payload, Signature
b. Key, Cipher, Block
c. Data, Hash, Encryption
d. Session, Mapping, Checksum
Answer: a. Header, Payload, Signaturehuntress
Browser-based OpenID Connect often uses the
a. Implicit Flow
b. Batch Flow
c. Modular Flow
d. XML Flow
Answer: a. Implicit Flowstackoverflow
The “code” parameter in OpenID Authorization Code Flow represents
a. Temporary authorization code
b. Encrypted password
c. Refresh token
d. Public key
Answer: a. Temporary authorization codestackoverflow
OpenID Connect can be integrated with
a. MFA systems
b. FTP servers
c. IDS tools
d. Firewalls only
Answer: a. MFA systemscibersafety
The OpenID Connect session management feature is used to
a. Track active sessions at the provider
b. Manage client credentials only
c. Encrypt tokens
d. Block cookies
Answer: a. Track active sessions at the providerhuntress
The token endpoint in OpenID Connect handles
a. Token exchange
b. Cookie generation
c. Firewall rules
d. Certificate issuance
Answer: a. Token exchangeopenid
The trust relationship in OpenID exists between
a. Relying Party and OpenID Provider
b. Client and Resource Server
c. Token and Redirect URI
d. User and Database
Answer: a. Relying Party and OpenID Providerhuntress
The access token issued with OpenID is used for
a. Accessing protected resources
b. Generating new passwords
c. Configuration management
d. Encrypting ID tokens
Answer: a. Accessing protected resourceshuntress
The nonce parameter ensures
a. Token uniqueness
b. Redirection safety
c. Session encryption
d. Client verification
Answer: a. Token uniquenessexamradar
OpenID Connect was standardized by
a. OpenID Foundation
b. ISO
c. NIST
d. W3C
Answer: a. OpenID Foundationopenid
A user authenticating via Google in an app is an example of
a. OpenID Connect
b. RADIUS
c. LDAP
d. Kerberos
Answer: a. OpenID Connecthuntress
The OIDC metadata document is typically found at
a. /.well-known/openid-configuration
b. /openid/login
c. /auth/login
d. /config/oidc
Answer: a. /.well-known/openid-configurationopenid
“Client_ID” in OpenID represents the
a. Identifier for the client app
b. Token verifier
c. Encryption algorithm
d. Authentication cookie
Answer: a. Identifier for the client appopenid
OpenID Connect tokens are usually transmitted via
a. HTTPS
b. HTTP
c. FTP
d. Telnet
Answer: a. HTTPScibersafety
A key benefit of OpenID Connect is
a. Reducing password reuse risks
b. Storing plaintext credentials
c. Avoiding HTTPS overhead
d. Client-side password sharing
Answer: a. Reducing password reuse riskscibersafety
The “prompt” parameter in OpenID Connect is used to
a. Control user interaction level
b. Request more access scopes
c. Validate ID tokens
d. Generate signing keys
Answer: a. Control user interaction levelhuntress
Error handling in OpenID Connect includes which field?
a. error_description
b. redirect_error
c. status_info
d. login_alert
Answer: a. error_descriptionhuntress
The “sub” claim in an ID token identifies
a. The subject user
b. The OAuth scope
c. The resource owner ID
d. The authentication method
Answer: a. The subject userhuntress
An OpenID Relying Party must always
a. Validate ID token signatures
b. Store passwords
c. Ignore unverified tokens
d. Decode tokens without keys
Answer: a. Validate ID token signaturescibersafety
The “aud” claim in an ID token represents
a. The intended audience (client)
b. Authorization code
c. Admin privileges
d. Authentication method
Answer: a. The intended audience (client)huntress
“exp” claim in ID tokens stands for
a. Expiration time
b. Execution point
c. Exposure limit
d. Exchange payload
Answer: a. Expiration timehuntress
OpenID Connect reduces which major cybersecurity threat?
a. Credential reuse
b. DDoS
c. Phishing
d. Ransomware
Answer: a. Credential reusecibersafety
Which OpenID component enables user info sharing across platforms securely?
a. UserInfo Endpoint
b. Token Validator
c. Signature Verifier
d. Session Token
Answer: a. UserInfo Endpointhuntress

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info