Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GPEN Exam - Topic 7 Question 3 Discussion

Which of the following statements is true about the Digest Authentication scheme?
B) A valid response from the client contains a checksum of the username, the password, the given random value, the HTTP method, and the requested URL.
A) In this authentication scheme, the username and password are passed with every request, not just when the user first types them.
C) The password is sent over the network in clear text format.
D) It uses the base64 encoding encryption scheme.

GIAC GPEN Exam - Topic 7 Question 3 Discussion

Actual exam question for GIAC's GPEN exam
Question #: 3
Topic #: 7
[All GPEN Questions]

Which of the following statements is true about the Digest Authentication scheme?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Maurine at May 06, 2022, 10:10 AM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Dorsey
9 months ago
B sounds right, but I’m surprised it’s that complex!
upvoted 0 times
...
Sheridan
9 months ago
I thought D was correct, but isn't base64 just encoding, not encryption?
upvoted 0 times
...
Peggie
10 months ago
Wait, C is false, right? No passwords in clear text for Digest!
upvoted 0 times
...
Doug
10 months ago
I disagree, A is misleading. Passwords aren't sent with every request.
upvoted 0 times
...
Virgie
10 months ago
B is definitely true! That's how it works.
upvoted 0 times
...
Nobuko
10 months ago
I don't think option D is correct either; I remember that it uses hashing, not base64 encoding, to protect the credentials.
upvoted 0 times
...
Jess
10 months ago
I recall that option C is incorrect because the whole point of Digest Authentication is to avoid sending the password in clear text.
upvoted 0 times
...
Glory
10 months ago
I'm a bit unsure, but I feel like option B sounds right since it mentions a checksum, which is part of how Digest Authentication works.
upvoted 0 times
...
Man
10 months ago
I think option A is definitely wrong because I remember that Digest Authentication doesn't send the password with every request.
upvoted 0 times
...
Dino
10 months ago
This seems like a straightforward question about the purpose of Cisco Cyber Vision Sensors. I think the key is understanding why they need to be embedded in the network infrastructure.
upvoted 0 times
...
Gilma
10 months ago
Hmm, I'm a bit unsure about this one. There are a few options presented, and I'm not entirely familiar with all of them. I'll need to carefully review the requirements and compare them to the features of each solution.
upvoted 0 times
...
Becky
10 months ago
This seems like a straightforward question about when a behavior intervention plan should be developed. I think the key is looking for the condition that must be met before the decision is made.
upvoted 0 times
...
Lewis
10 months ago
This one seems pretty straightforward. I'm pretty confident the answer is D - an attacker sending emails posing as a service team member to get users to disclose their passwords.
upvoted 0 times
...
Dustin
10 months ago
Rule out option A immediately - no way you'd do a submaximal test without physician supervision, especially with this patient profile.
upvoted 0 times
...

Save Cancel