Django Django Authentication & Security

Question 1

Which function authenticates a user with a username and password in Django?

Accepted Answer

authenticate(request, username=username, password=password)

Answer

login(request, username, password)

Answer

User.check_password(password)

Answer

auth.verify(username, password)

Question 2

What does `login(request, user)` do in Django?

Accepted Answer

Attaches the user to the session and marks them as logged in

Answer

Verifies the user's credentials

Answer

Creates a new user account

Answer

Generates an authentication token

Question 3

What does Django's CSRF middleware protect against?

Accepted Answer

Cross-Site Request Forgery attacks where malicious sites submit requests on behalf of authenticated users

Answer

SQL injection via form inputs

Answer

Cross-Site Scripting via template variables

Answer

Brute-force login attacks

Question 4

Which Django setting controls password hashing algorithms?

Accepted Answer

PASSWORD_HASHERS

Answer

PASSWORD_HASH_ALGORITHM

Answer

AUTH_PASSWORD_HASHERS

Answer

SECURITY_HASHERS

Question 5

What does `request.user.is_authenticated` return for an anonymous user?

Accepted Answer

False

Answer

True

Answer

None

Answer

Raises AttributeError

Question 6

Which decorator enforces that a view can only be accessed by users with a specific permission?

Accepted Answer

@permission_required('app.permission_codename')

Answer

@requires_permission('permission_codename')

Answer

@has_perm('permission_codename')

Answer

@check_permission('permission_codename')