nerdexam
GIAC

GSLC · Question #237

Which of the following statements about Digest authentication are true? Each correct answer represents a complete solution. Choose two.

The correct answer is A. Digest authentication is a more secure authentication method as compared to Basic authentication. D. In Digest authentication, passwords are sent across a network as a hash value, rather than as clear text. Digest authentication improves on Basic authentication by transmitting a hashed form of the password instead of clear text, making credential interception less dangerous.

Security Architecture & Engineering

Question

Which of the following statements about Digest authentication are true? Each correct answer represents a complete solution. Choose two.

Options

  • ADigest authentication is a more secure authentication method as compared to Basic authentication.
  • BIn Digest authentication, passwords are sent across a network as clear text, rather than as a has value.
  • CDigest authentication is used by wireless LANs, which follow the IEEE 802.11 standard.
  • DIn Digest authentication, passwords are sent across a network as a hash value, rather than as clear text.

How the community answered

(33 responses)
  • A
    85% (28)
  • B
    9% (3)
  • C
    6% (2)

Why each option

Digest authentication improves on Basic authentication by transmitting a hashed form of the password instead of clear text, making credential interception less dangerous.

ADigest authentication is a more secure authentication method as compared to Basic authentication.Correct

Digest authentication is more secure than Basic authentication because Basic encodes credentials in Base64 (effectively clear text), while Digest uses an MD5 hash challenge-response mechanism that prevents the actual password from traversing the network.

BIn Digest authentication, passwords are sent across a network as clear text, rather than as a has value.

This reverses the behavior of Digest authentication - it is Basic authentication that sends credentials as clear text (Base64-encoded), not Digest.

CDigest authentication is used by wireless LANs, which follow the IEEE 802.11 standard.

Digest authentication is an HTTP-level credential scheme (RFC 7616), not an IEEE 802.11 wireless LAN authentication mechanism; 802.11 uses protocols such as WPA2 with EAP variants.

DIn Digest authentication, passwords are sent across a network as a hash value, rather than as clear text.Correct

In Digest authentication, the client computes an MD5 hash of the password combined with a server-supplied nonce and sends only that hash value, so the plaintext password is never transmitted across the network.

Concept tested: Digest vs Basic authentication credential handling

Source: https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/digestauthentication

Topics

#digest authentication#password hashing#authentication methods#basic vs digest

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSLC Practice