Which HTTP response code is MOST likely returned after successful authentication?

Question

Options

• A200
• B302
• C401
• D403

• A
  17% (5)
• B
  72% (21)
• C
  3% (1)
• D
  7% (2)

Explanation

After successful authentication, a web server typically issues a 302 Found redirect to send the user to their intended destination (e.g., a dashboard or originally requested page) rather than rendering content directly - this is the standard login-redirect pattern used in virtually every web application.

Why the distractors are wrong:

• A (200 OK): A 200 means the request succeeded and content was returned directly. Authentication flows almost always redirect after login rather than respond with page content inline.
• C (401 Unauthorized): This is returned before authentication succeeds - it signals that credentials are missing or invalid, the opposite scenario.
• D (403 Forbidden): This means the user is authenticated but lacks permission to access the resource. It presupposes auth already happened.

Memory tip: Think of the login flow as a hallway with a gate. 401 = "Show me your badge" (no credentials yet). 403 = "I see your badge, but you can't go in here" (wrong access level). 302 = "Badge accepted - please proceed to the lobby" (redirect on success).

No community discussion yet for this question.