All challenges
Multiple ChoiceIntermediate 30s

Rate limiting auth

Choose the best answer for: brute force protection
Options
  1. 1Limit login attempts per IP/time window to prevent brute force
  2. 2Only for APIs: rate limiting never applies to browser forms
  3. 3No limits on login attempts, since strong passwords suffice
  4. 4Unlimited attempts allowed but each failure adds a delay

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle