GIAC Exam GCFR Topic 1 Question 38 Discussion

Actual exam question for GIAC's GCFR exam

Question #: 38
Topic #: 1

[All GCFR Questions]

At what point of the OAuth delegation process does the Resource Owner approve the scope of access to be allowed?

AAfter user credentials are accepted by the Authorization Server

BOnce the OAuth token is accepted by the Application

CWhen the Resource Server receives the OAuth token

DBefore user credentials are sent to the Authentication Server

Show Suggested Answer

Suggested Answer: C

by Lashaun at Feb 12, 2025, 03:14 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

Hold up, isn't the resource owner the one who's actually granting access? I'm pretty sure the answer is A.

upvoted 0 times

...

8 days ago

I think B is the correct answer. The resource owner approves the scope when the application accepts the OAuth token.

upvoted 0 times

...

16 days ago

Definitely option A. The resource owner approves the scope of access before the authorization server accepts the user credentials.

upvoted 0 times

...

20 days ago

That makes sense, as the Resource Owner needs to give consent before the process can continue.

upvoted 0 times

...

22 days ago

I believe it's after user credentials are accepted by the Authorization Server.

upvoted 0 times

...

23 days ago

I think the Resource Owner approves the scope of access before user credentials are sent to the Authentication Server.

upvoted 0 times

...