SAP Exam C_C4H62_2408 Topic 9 Question 17 Discussion

Actual exam question for SAP's C_C4H62_2408 exam

Question #: 17
Topic #: 9

[All C_C4H62_2408 Questions]

You are validating a JWT and want to be sure you use the correct public key.

What do you need to check?

AThe public key hash is the same as the signature hash of the JWT.

BThe expiration time of the JWT lies within the expiration time defined in the public key.

CThe issuer of the public key is the same as the issuer in the JWT header.

DThe keyID of the public key is the same as the keyID in the JWT header.

Show Suggested Answer

Suggested Answer: D

by Rosendo at Feb 06, 2025, 09:02 AM

Limited Time Offer

25%

Off

Get Premium C_C4H62_2408 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosina

3 months ago

I also believe we should check if the keyID of the public key matches the keyID in the JWT header.

upvoted 0 times

...

Johnson

3 months ago

Haha, this reminds me of the time I accidentally used the wrong public key and ended up validating a JWT from my grandma's bingo club. Oops!

upvoted 0 times

Tambra

2 months ago

C) The issuer of the public key is the same as the issuer in the JWT header.

upvoted 0 times

...

Viva

2 months ago

A) The public key hash is the same as the signature hash of the JWT.

upvoted 0 times

...

Lynelle

3 months ago

I'm going with option B. If the JWT is expired, it's not valid, so the expiration time needs to be checked.

upvoted 0 times

Cecilia

2 months ago

User1: That's a good point, we should definitely check if the issuer matches in the JWT header.

upvoted 0 times

...

Toshia

2 months ago

User3: What about option C? Shouldn't we also verify the issuer of the public key?

upvoted 0 times

...

Laquanda

3 months ago

User2: I agree, checking the expiration time is crucial for validating the JWT.

upvoted 0 times

...

Freeman

3 months ago

User1: I think option B is correct. The expiration time of the JWT must match the public key.

upvoted 0 times

...

Merilyn

3 months ago

I agree with Malinda. It's important to verify that to ensure the JWT is valid.

upvoted 0 times

...

Pearlene

3 months ago

Option A sounds like a good idea, but I'm not sure how you'd check the public key hash against the signature hash. Sounds like a lot of work!

upvoted 0 times

...

Iola

3 months ago

I think option C is the correct answer. The issuer of the public key needs to match the issuer in the JWT header to ensure the JWT is valid.

upvoted 0 times

Hyun

2 months ago

So, we need to check both options C and D to validate the JWT.

upvoted 0 times

...

Vanesa

2 months ago

That's true, we should make sure both the issuer and keyID match for validation.

upvoted 0 times

...

Dorethea

3 months ago

But we also need to check the keyID in the JWT header, so option D is important too.

upvoted 0 times

...

Carmen

3 months ago

I agree, option C is the correct answer.

upvoted 0 times

...

Malinda

4 months ago

I think we need to check if the public key hash matches the signature hash of the JWT.

upvoted 0 times

...