Authentication and Session Management Quiz

What is the primary purpose of new registration requirements in the login process?

• To establish the identity of users

• To track user behavior

• To prevent automated registrations

• To enable financial websites

Which step in the login workflow involves creating an anonymous session on the first hit?

• Idle Timeout

• Anonymous session created on first hit

• Starting HTTPS and encryption in transit

• Processing and verifying credentials

What is the critical reason for delivering forms over HTTPS in the login process?

• Authenticity

• Availability

• Integrity

• Confidentiality

Why is it important to verify the user's email address before enabling the account?

• To prevent automated registrations

• To establish the user's identity

• To track user behavior

• To enable financial websites

What is the purpose of using CAPTCHAs in preventing automated registrations?

• To enable financial websites

• To establish the user's identity

• To track user behavior

• To detect multiple registration attempts

Which step in the login workflow involves potential re-authentication for sensitive operations?

• Potential re-authentication for sensitive operations

• Idle Timeout

• Logout

• Do cool things

What is the danger of storing sensitive data in cookies?

• Cross-site scripting

• Cookie theft

• Replay attack

• Session hijacking

What is the primary role of multi-factor authentication in improving web app security?

• To improve security without account lockouts

• To enhance user experience

• To prevent automated registrations

• To enforce password policy

Why is it important to use a unique pre-salt for user passwords?

• To prevent session hijacking

• To enhance user experience

• To avoid dictionary attacks

• To improve password storage

What is the significance of enforcing special characters in a password policy?

• To avoid weak passwords

• To improve password storage

• To enhance user experience

• To prevent session fixation