CSSLP · Question #24
Which of the following security design patterns provides an alternative by requiring that a user's authentication credentials be verified by the database before providing access to that user's data?
The correct answer is C. Password propagation. Password propagation is a security design pattern where a user's authentication credentials are directly verified by the database to grant access to that user's data.
Question
Which of the following security design patterns provides an alternative by requiring that a user's authentication credentials be verified by the database before providing access to that user's data?
Options
- ASecure assertion
- BAuthenticated session
- CPassword propagation
- DAccount lockout
How the community answered
(52 responses)- B2% (1)
- C92% (48)
- D6% (3)
Why each option
Password propagation is a security design pattern where a user's authentication credentials are directly verified by the database to grant access to that user's data.
Secure assertion involves a trusted third party asserting a user's identity to a service, rather than the database directly verifying credentials.
An authenticated session refers to the established state after a user has successfully authenticated, allowing them to access resources for a period, but it is not a design pattern for direct database credential verification.
Password propagation is a pattern where the user's credentials, such as a password, are transmitted and verified directly by the database to authenticate the user and control access to their specific data, shifting the authentication responsibility to the data layer.
Account lockout is a security mechanism that prevents further login attempts after a specified number of failed authentications to protect against brute-force attacks.
Concept tested: Database authentication patterns
Topics
Community Discussion
No community discussion yet for this question.