Exam 1z0-1084-20 topic 1 question 32 discussion

Actual exam question from Oracle's 1z0-1084-20

Question #: 32
Topic #: 1

A developer using Oracle Cloud Infrastructure (OCI) API Gateway must authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string parameters from the API caller.
Which method can the developer use in this scenario? (Choose the best answer.)

A. Create an authorizer function using request header authorization.
B. Create an authorizer function using token-based authorization.
C. Create a cross account functions authorizer.
D. Create an authorizer function using OCI Identity and Access Management based authentication.

Show Suggested Answer

Suggested Answer: A 🗳️

by gfhbox0083 at July 12, 2020, 8:32 a.m.

Comments

Submit Cancel

gfhbox0083

Highly Voted 5 years ago

I will go with B, using token-based authorization. more info, on Using Authorizer Functions to Add Authentication and Authorization to API Deployments, via the below link https://docs.cloud.oracle.com/en-us/iaas/Content/APIGateway/Tasks/apigatewayusingauthorizerfunction.htm

upvoted 9 times

...