Chapter Assessment: Security

This review covers how the booking service protects itself: the filter chain, authentication and authorization, stored passwords, JWT resource servers, OAuth2 login for staff, method security, CORS and CSRF, and the final policy for five callers. The bank holds 24 questions, and each attempt draws ten. Most questions send a request from Ana, Ben, staff, or an admin and ask which status comes back, which layer refuses it, or which fix is right