nerdexam
(ISC)2

CSSLP · Question #24

Which of the following security design patterns provides an alternative by requiring that a user's authentication credentials be verified by the database before providing access to that user's data?

The correct answer is C. Password propagation. Password propagation is a security design pattern where a user's authentication credentials are directly verified by the database to grant access to that user's data.

Secure Software Architecture and Design

Question

Which of the following security design patterns provides an alternative by requiring that a user's authentication credentials be verified by the database before providing access to that user's data?

Options

  • ASecure assertion
  • BAuthenticated session
  • CPassword propagation
  • DAccount lockout

How the community answered

(52 responses)
  • B
    2% (1)
  • C
    92% (48)
  • D
    6% (3)

Why each option

Password propagation is a security design pattern where a user's authentication credentials are directly verified by the database to grant access to that user's data.

ASecure assertion

Secure assertion involves a trusted third party asserting a user's identity to a service, rather than the database directly verifying credentials.

BAuthenticated session

An authenticated session refers to the established state after a user has successfully authenticated, allowing them to access resources for a period, but it is not a design pattern for direct database credential verification.

CPassword propagationCorrect

Password propagation is a pattern where the user's credentials, such as a password, are transmitted and verified directly by the database to authenticate the user and control access to their specific data, shifting the authentication responsibility to the data layer.

DAccount lockout

Account lockout is a security mechanism that prevents further login attempts after a specified number of failed authentications to protect against brute-force attacks.

Concept tested: Database authentication patterns

Topics

#Security design patterns#Authentication#Database security#Access control

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice