What activity is a login portal performing when it compares a username and password hash against stored credentials?

What activity is a login portal performing when it compares a username and password hash against stored credentials?

• A. Conduct data protection
• B. Utilize SDLC
• C. Conduct authentication activities
• D. Conduct a parameterized query

Answer: (C)

The activity of comparing a username and password hash against stored credentials is a core component of the authentication process. Authentication is the mechanism through which a system verifies the identity of a user attempting to access it. When a user inputs their credentials, the system hashes the entered password and then compares that hashed value to the stored hash in the system's database. If they match, the user is deemed authenticated and allowed access. This process is critical because it ensures that only users with the correct credentials can gain entry to sensitive systems or data. The hashing of passwords adds an extra layer of security, protecting the original password from being stored in plaintext and thereby reducing the risk of exposure in the event of a data breach. The other options relate to different concepts: conducting data protection pertains to safeguarding information against unauthorized access, utilizing the Software Development Life Cycle (SDLC) refers to a structured approach to software development, and conducting a parameterized query relates to protecting databases from injection attacks. However, none of these encompass the specific activity of validating a user's identity, which is the essence of authentication.

The activity of comparing a username and password hash against stored credentials is a core component of the authentication process. Authentication is the mechanism through which a system verifies the identity of a user attempting to access it. When a user inputs their credentials, the system hashes the entered password and then compares that hashed value to the stored hash in the system's database. If they match, the user is deemed authenticated and allowed access.

This process is critical because it ensures that only users with the correct credentials can gain entry to sensitive systems or data. The hashing of passwords adds an extra layer of security, protecting the original password from being stored in plaintext and thereby reducing the risk of exposure in the event of a data breach.

The other options relate to different concepts: conducting data protection pertains to safeguarding information against unauthorized access, utilizing the Software Development Life Cycle (SDLC) refers to a structured approach to software development, and conducting a parameterized query relates to protecting databases from injection attacks. However, none of these encompass the specific activity of validating a user's identity, which is the essence of authentication.