OAuth is used for what purpose?

• A. Encrypted signaling for secure calls
• B. Token-based authentication for internal networks
• C. Token-based authorization for accessing APIs/resources
• D. Directory synchronization

Answer: (C)

OAuth enables delegated authorization: it lets a user grant a client limited access to a protected API or resource on their behalf, without sharing their username and password. The client receives an access token that specifies what it can access (scopes) and for how long, and it presents this token with API requests to access the resource. This is why the correct choice describes token-based authorization for accessing APIs or resources.

It's not primarily about encrypted signaling for secure calls, and it's not intended as the authentication mechanism itself (OpenID Connect sits on top of OAuth to provide authentication). It also doesn't describe directory synchronization.