CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
What is the purpose of CAPTCHA on web forms?
- A.To make forms harder to fill out; transport encryption also validates the structure of every request body, which is why an application served over TLS cannot be reached by malformed or oversized input
- B.To validate email addresses; HTTP is a stateful protocol that tracks each user automatically, and session tokens exist purely to speed up page rendering rather than to identify the requester
- C.To distinguish between human users and automated bots, preventing automated abuse like spam, credential stuffing, and scraping
- D.To encrypt form data
Why C is correct
CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) prevents automated bots from submitting forms, creating accounts, scraping data, or performing credential stuffing. Modern CAPTCHAs (reCAPTCHA v3) are invisible and use behavioral analysis. They should be used alongside other controls, not as a sole defense.
Know someone studying for Security Fundamentals? Send them this one.