Study. uk . com
  1. Home
  2. All questions
  3. Question 348

CISSP study material · question 348 of 500

Which two statements about the OAuth 2.0 authorization server match RFC 6749? Choose two.

  1. A single authorization server may issue access tokens accepted by several resource servers.
  2. It must be operated by the same organisation that operates the client.
  3. The two may run on one machine, or be operated as separate entities.
  4. Its interaction with the resource server is specified in detail by the framework.
Show the answer

Answer: C. The two may run on one machine, or be operated as separate entities.
A. A single authorization server may issue access tokens accepted by several resource servers.

The two servers may be one machine or two, and several resource servers may honour tokens minted by one authorization server; how they interact is unspecified.

Source: RFC 6749 (IETF) — RFC 6749 > 1.1 Roles

Challenge yourself on this topic → Study as cards