Which statement describes 403 Forbidden?

Which statement describes 403 Forbidden?

• A. The server understands the request but refuses to authorize it
• B. The request lacks valid authentication credentials
• C. The resource cannot be found
• D. The request is malformed

Answer: (A)

When a server returns 403 Forbidden, it means the server understood your request but will not grant access. This is about permission rather than proving who you are. If you haven’t provided valid credentials, you’d typically see a 401 Unauthorized instead. If the resource doesn’t exist, the server would respond with 404 Not Found. If the request itself is malformed, you’d get 400 Bad Request. So the statement that the server understands the request but refuses to authorize it best captures this status: access is explicitly denied due to permissions, even though the request is otherwise valid.

When a server returns 403 Forbidden, it means the server understood your request but will not grant access. This is about permission rather than proving who you are. If you haven’t provided valid credentials, you’d typically see a 401 Unauthorized instead. If the resource doesn’t exist, the server would respond with 404 Not Found. If the request itself is malformed, you’d get 400 Bad Request. So the statement that the server understands the request but refuses to authorize it best captures this status: access is explicitly denied due to permissions, even though the request is otherwise valid.