403 Forbidden can happen even when the user is logged in.
Practice this question from Quiz: REST and HTTP, with options and an explanation.
Question
403 Forbidden can happen even when the user is logged in.
Option A — Correct answer
True
401 asks for valid authentication; 403 denies access despite identity.
Option B
False
401 asks for valid authentication; 403 denies access despite identity.