nerdexam
GIAC

GSLC · Question #542

Which of the following authentication methods is used to enable a Web browser to provide credentials when making a request during an HTTP transaction?

The correct answer is B. Basic authentication. HTTP Basic Authentication is the standard mechanism that prompts a web browser to collect and transmit a username and password as a Base64-encoded credential in the HTTP Authorization header.

Security Architecture & Engineering

Question

Which of the following authentication methods is used to enable a Web browser to provide credentials when making a request during an HTTP transaction?

Options

  • AAnonymous authentication
  • BBasic authentication
  • CDigest authentication
  • DIntegrated Windows authentication

How the community answered

(55 responses)
  • A
    2% (1)
  • B
    91% (50)
  • C
    2% (1)
  • D
    5% (3)

Why each option

HTTP Basic Authentication is the standard mechanism that prompts a web browser to collect and transmit a username and password as a Base64-encoded credential in the HTTP Authorization header.

AAnonymous authentication

Anonymous authentication requires no credentials at all, granting access without prompting the browser for a username or password.

BBasic authenticationCorrect

Basic Authentication is defined in RFC 7617 and causes the browser to present a credential dialog, then send the username and password encoded in Base64 within the HTTP Authorization request header. It is the simplest and most widely supported method for browsers to supply credentials during an HTTP transaction, though it offers no encryption on its own.

CDigest authentication

Digest Authentication uses an MD5 hash challenge-response mechanism rather than directly transmitting credentials, making it a different protocol from the one that simply enables browsers to provide credentials.

DIntegrated Windows authentication

Integrated Windows Authentication uses Kerberos or NTLM tickets negotiated through the Windows security subsystem, not a generic browser credential prompt suitable for all HTTP clients.

Concept tested: HTTP Basic Authentication credential submission mechanism

Source: https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication

Topics

#basic authentication#HTTP authentication#web credentials#browser authentication

Community Discussion

No community discussion yet for this question.

Full GSLC Practice