Which authorization approach maintains separate authorization details for each resource request?

Which authorization approach maintains separate authorization details for each resource request?

• A. Explicit Authorization
• B. Implicit Authorization
• C. Decentralized Authorization
• D. Federated Authorization

Answer: (B)

The idea being tested is how an access decision is made for each access attempt. In implicit authorization, the system determines the decision at the moment a resource is requested by evaluating the current context and attributes against policy. This approach effectively creates a fresh authorization decision for every request, so separate authorization details are considered for each resource request. It supports dynamic, per-request control rather than relying on a single, pre-defined grant. Explicit authorization relies on static grants tied to resources, which wouldn’t emphasize per-request evaluation. Decentralized authorization spreads decision-making across multiple nodes, and federated authorization focuses on cross-domain trust and tokens; neither centers on producing a per-request, on-the-fly authorization decision in the way implicit authorization does.

The idea being tested is how an access decision is made for each access attempt. In implicit authorization, the system determines the decision at the moment a resource is requested by evaluating the current context and attributes against policy. This approach effectively creates a fresh authorization decision for every request, so separate authorization details are considered for each resource request. It supports dynamic, per-request control rather than relying on a single, pre-defined grant.

Explicit authorization relies on static grants tied to resources, which wouldn’t emphasize per-request evaluation. Decentralized authorization spreads decision-making across multiple nodes, and federated authorization focuses on cross-domain trust and tokens; neither centers on producing a per-request, on-the-fly authorization decision in the way implicit authorization does.