312-50V13 Question #141: Real Exam Question with Answer & Explanation

Question

What hacking attack is challenge/response authentication used to prevent?

Options

• AReplay attacks
• BScanning attacks
• CSession hijacking attacks
• DPassword cracking attacks

Explanation

Challenge/response authentication is a security mechanism designed to prevent replay attacks by ensuring that authentication credentials cannot be reused.

Common mistakes.

• B. Challenge/response authentication mechanisms do not directly prevent scanning attacks, which involve probing systems for open ports or vulnerabilities.
• C. While it enhances overall security, challenge/response authentication primarily prevents replay attacks during the initial authentication phase, not directly session hijacking after authentication.
• D. Challenge/response authentication makes password cracking more difficult by not transmitting the password directly, but its primary purpose is to prevent the replay of authentication tokens, not direct password guessing.

Concept tested. Challenge/response authentication and replay attack prevention

Reference. https://www.cloudflare.com/learning/security/glossary/replay-attack/

No community discussion yet for this question.