Senior JWT (JSON Web Tokens)

Test your Senior-level Web Security Jwt Json Web Tokens skills in Security Networking. This timed assessment evaluates your expertise in Information Technology.

Duration: 5 minutes

•40 questions

Time Remaining: 05:00

Progress: 0%

40 questions remaining

Question 1 of 40Assessment

When using JWKS for key rotation, what is the best practice for a resource server to avoid fetching the key set on every request?

A. Caching the JWKS response and only re-fetching it when a JWT is received with an unknown 'kid' value.

B. Hardcoding the public keys in the resource server's configuration file and updating them via CI/CD.

C. Using a web socket to receive real-time updates from the authorization server whenever a key is rotated.

D. Fetching the JWKS only when the current system time matches the 'exp' claim of the last used public key.

Keyboard Shortcuts

↑↓Navigate options

EnterSelect answer

←→Prev/Next question

SSkip question

1-4Select A-D

EscClear answer

SpaceNext question

BackspacePrevious question