Free CompTIA Security+ SY0-701 Practice Question
A company develops a third-party application that needs to access user data from a popular social media platform without exposing user credentials. Which of the following would be the most secure method for the application to request and receive authorization to access the platform’s data on behalf of the user?
Use basic access authentication by sending a base64 encoded string containing the user's username and password.
Store user credentials locally on the user device and use them to authenticate each session with the social media platform.
Use OAuth protocol to request and receive authorization tokens from the social media platform.
Implement a custom encryption algorithm to secure user credentials when accessing the social media platform’s API.
Embed user credentials in the application code and authenticate directly with the social media platform.
Create a shared user account on the social media platform for the application and all its users.
