What security mechanism is a challenge-response test used by web applications to determine if the responder is a human?

What security mechanism is a challenge-response test used by web applications to determine if the responder is a human?

• A. Cookies
• B. CAPTCHA
• C. Session Fixation Attack
• D. web-based timing attack

Answer: (B)

This question assesses how a web application proves a user is human through a challenge-response mechanism. A CAPTCHA is a challenge-response test designed to be easy for humans but hard for automated programs. The server presents a task—like deciphering distorted text, solving a simple puzzle, or selecting specific images—and the user’s correct response demonstrates human interaction. By requiring this response, the system shields forms and services from automated abuse and bot traffic. Cookies, while important for maintaining session state, aren’t used to verify that the responder is human. A session fixation attack and web-based timing attack are different types of security issues: the former targets how session identifiers are managed, and the latter exploits timing information to glean data. They don’t serve as a human verification mechanism.

This question assesses how a web application proves a user is human through a challenge-response mechanism. A CAPTCHA is a challenge-response test designed to be easy for humans but hard for automated programs. The server presents a task—like deciphering distorted text, solving a simple puzzle, or selecting specific images—and the user’s correct response demonstrates human interaction. By requiring this response, the system shields forms and services from automated abuse and bot traffic.

Cookies, while important for maintaining session state, aren’t used to verify that the responder is human. A session fixation attack and web-based timing attack are different types of security issues: the former targets how session identifiers are managed, and the latter exploits timing information to glean data. They don’t serve as a human verification mechanism.