Django Django Authentication & Security

Question 1

Which function authenticates a user with a username and password in Django?

Accepted Answer

authenticate(request, username=username, password=password)

Answer

authenticate() checks credentials against all configured authentication backends and returns a User object on success or None on failure.

Question 2

What does `login(request, user)` do in Django?

Accepted Answer

Attaches the user to the session and marks them as logged in

Answer

login() saves the user's ID to the session using Django's session framework, establishing the logged-in state across requests.

Question 3

What does Django's CSRF middleware protect against?

Accepted Answer

Cross-Site Request Forgery attacks where malicious sites submit requests on behalf of authenticated users

Answer

CSRF middleware validates a secret token in POST/PUT/DELETE requests to ensure they originate from the same site, not a malicious third-party page.

Question 4

Which Django setting controls password hashing algorithms?

Accepted Answer

PASSWORD_HASHERS

Answer

PASSWORD_HASHERS is a list of hasher classes in priority order; Django uses the first one for new passwords and can upgrade older hashes automatically.

Question 5

What does `request.user.is_authenticated` return for an anonymous user?

Accepted Answer

False

Answer

For anonymous users, Django provides an AnonymousUser object whose is_authenticated property always returns False.

Django Practice Test

Django Practice Test

Django Django Authentication & Security