Discuss GIAC GCFR Exam Topic 8 Question 55

At what point of the OAuth delegation process does the Resource Owner approve the scope of access to be allowed?

AAfter user credentials are accepted by the Authorization Server

BOnce the OAuth token is accepted by the Application

CWhen the Resource Server receives the OAuth token

DBefore user credentials are sent to the Authentication Server

Suggested Answer: A

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

20 comments · newest first

Letha 1 month ago

C doesn’t fit. The resource owner should approve access first, right?

Kate 1 month ago

I feel like B is a bit off. The token should be accepted after approval.

Krystal 2 months ago

A seems right, but I see why D is popular too.

Idella 2 months ago

I’m leaning towards A. The authorization server needs to confirm access.

Louvenia 2 months ago

I agree with D. It makes sense to approve before sending credentials.

Glory 2 months ago

I think it's D. The user should know what they're sharing first.

Nakisha 2 months ago

Totally agree with A! User consent is key before anything else.

Nichelle 2 months ago

Wait, are we sure it's A? I feel like I need to double-check that.

Claudia 3 months ago

No way, it's not B or C. Those happen later in the process.

Denny 3 months ago

I thought it was D at first, but A makes more sense.

Pedro 3 months ago

It's definitely A! The user approves access before credentials are sent.

Cristy 3 months ago

Totally agree with A! User consent is key before anything else.

Quentin 3 months ago

Wait, are we sure it's A? I feel like I need to double-check that.

Tammi 4 months ago

No way, it's not B or C. Those happen later in the process.

Portia 5 months ago

I thought it was D at first, but A makes more sense.

Pete 5 months ago

It's definitely A! The user approves access before credentials are sent.

Dana 6 months ago

I feel like it has to be before the credentials are sent, so D seems right, but I wish I had reviewed this section more.

Queenie 6 months ago

I'm a bit confused; I thought the approval happened after the user logged in, which could point to A again.

Rory 6 months ago

I remember a practice question that mentioned the approval happens before any tokens are exchanged, which makes me lean towards D.

Vincenza 6 months ago

I think the Resource Owner approves the scope right after they enter their credentials, so maybe it's A? But I'm not entirely sure.

GIAC GCFR Exam - Topic 8 Question 55 Discussion