Once an Android client has authenticated to a web service, what must be done on the server-side to ensure correct authorization checks are being performed?

Question

Options

• AFor each request that is considered more sensitive than previous ones, force the client to re-
• BFor each request, check the session token to verify the client has been authorized for that device
• CFor each request, ensure that the client is authenticated and that the specific Android device
• DFor each request, ensure that the client is authenticated and that the specific client is authorized to

• A
  13% (7)
• B
  2% (1)
• C
  8% (4)
• D
  77% (41)

No community discussion yet for this question.