You have a server-side web app that uses OAuth 2.0 and is registered to the Microsoft identity platform.
A user acquires an authorization token.
You need to specify which HTTP header format the user must use to access the app.
What should you specify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.