nerdexam
GIAC

GSLC · Question #64

Which of the following types of authentication is generally used for public Internet Web sites?

The correct answer is A. Anonymous authentication. Anonymous authentication allows any user to access public web content without providing credentials, making it the standard method for public-facing Internet websites.

Security Architecture & Engineering

Question

Which of the following types of authentication is generally used for public Internet Web sites?

Options

  • AAnonymous authentication
  • BIntegrated Windows authentication
  • CBasic authentication
  • DDigest authentication

How the community answered

(36 responses)
  • A
    92% (33)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Anonymous authentication allows any user to access public web content without providing credentials, making it the standard method for public-facing Internet websites.

AAnonymous authenticationCorrect

Anonymous authentication grants access to web resources without requiring a username or password, which is the appropriate and expected behavior for public Internet websites where content must be freely accessible to any visitor without an account.

BIntegrated Windows authentication

Integrated Windows Authentication uses Kerberos or NTLM and requires users to have a valid Windows domain account, making it suitable only for internal intranet sites, not public Internet sites.

CBasic authentication

Basic authentication transmits credentials in Base64 encoding and requires a valid username and password, which is not appropriate for public sites where no credential barrier should exist.

DDigest authentication

Digest authentication requires a valid user account and uses a challenge-response mechanism over HTTP, which is designed for authenticated access rather than open public access.

Concept tested: Web authentication methods for public Internet sites

Source: https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/anonymousauthentication/

Topics

#authentication types#anonymous authentication#web authentication#Internet security

Community Discussion

No community discussion yet for this question.

Full GSLC Practice