Discuss GIAC GPEN Exam Topic 7 Question 3

Which of the following statements is true about the Digest Authentication scheme?

AIn this authentication scheme, the username and password are passed with every request, not just when the user first types them.

BA valid response from the client contains a checksum of the username, the password, the given random value, the HTTP method, and the requested URL.

CThe password is sent over the network in clear text format.

DIt uses the base64 encoding encryption scheme.

Suggested Answer: B

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Dorsey 11 months ago

B sounds right, but I’m surprised it’s that complex!

Sheridan 11 months ago

I thought D was correct, but isn't base64 just encoding, not encryption?

Peggie 12 months ago

Wait, C is false, right? No passwords in clear text for Digest!

Doug 12 months ago

I disagree, A is misleading. Passwords aren't sent with every request.

Virgie 12 months ago

B is definitely true! That's how it works.

Nobuko 1 year ago

I don't think option D is correct either; I remember that it uses hashing, not base64 encoding, to protect the credentials.

Jess 1 year ago

I recall that option C is incorrect because the whole point of Digest Authentication is to avoid sending the password in clear text.

Glory 1 year ago

I'm a bit unsure, but I feel like option B sounds right since it mentions a checksum, which is part of how Digest Authentication works.

Man 1 year ago

I think option A is definitely wrong because I remember that Digest Authentication doesn't send the password with every request.

Dino 1 year ago

This seems like a straightforward question about the purpose of Cisco Cyber Vision Sensors. I think the key is understanding why they need to be embedded in the network infrastructure.

Gilma 1 year ago

Hmm, I'm a bit unsure about this one. There are a few options presented, and I'm not entirely familiar with all of them. I'll need to carefully review the requirements and compare them to the features of each solution.

Becky 1 year ago

This seems like a straightforward question about when a behavior intervention plan should be developed. I think the key is looking for the condition that must be met before the decision is made.

Lewis 1 year ago

This one seems pretty straightforward. I'm pretty confident the answer is D - an attacker sending emails posing as a service team member to get users to disclose their passwords.

Dustin 1 year ago

Rule out option A immediately - no way you'd do a submaximal test without physician supervision, especially with this patient profile.

GIAC GPEN Exam - Topic 7 Question 3 Discussion