Questions

So, by the end of this chapter, you should know the answers to the following questions:

1. What attribute can we use to mark a method or controller so that it can only be called through HTTPS?
2. What is the difference between role-based and policy-based authorization?
3. What is the purpose of CORS?
4. What is the purpose of HSTS?
5. What is the challenge stage of the authentication process?
6. Why should we take care when binding requests to model classes?
7. What is the sliding expiration of a cookie?