What is the purpose of CAPTCHA on web forms?
- A.A. To make forms harder to fill out
- B.D. To validate email addresses
- C.C. To encrypt form data
- D.B. To distinguish between human users and automated bots, preventing automated abuse like spam, credential stuffing, and scraping
Why D is correct
CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) prevents automated bots from submitting forms, creating accounts, scraping data, or performing credential stuffing. Modern CAPTCHAs (reCAPTCHA v3) are invisible and use behavioral analysis. They should be used alongside other controls, not as a sole defense.
Know someone studying for Security Fundamentals? Send them this one.