CAS-005 practice - PrepKeys

Q1 Single choice

A security architect is troubleshooting an issue with an OIDC implementation. The architect reviews the following configuration and errors:

Error: Invalid authentication request code

Which of the following is the most likely cause of the error?

A
The redirect-url parameter is not in the allowed list of redirect hosts in the configuration.
B
Introspection is not enabled within the OIDC code implementation.
C
The encoding of the URL parameters on the proxy system is failing.
D
The state parameter is being reused within the authentication challenge.
E
OAuth 2.0 was unable to verify the lack of an interception attack.