What challenge-response authentication protocol was developed by Microsoft for use in its products?

What challenge-response authentication protocol was developed by Microsoft for use in its products?

• A. Kerberos
• B. OAuth
• C. NT LAN Manager (NTLM) authentication
• D. SAML

Answer: (C)

NTLM is a challenge-response authentication protocol created by Microsoft for use in its Windows environments. In this approach, the server issues a random challenge to the client, and the client responds with a value derived from that challenge plus the user’s password hash. The server, which has the corresponding hash, can verify the response without ever sending the actual password over the network. This mechanism lets systems confirm identities securely during login or access requests. NTLM originated in the LAN Manager era and remains for compatibility, though Kerberos has largely taken its place in modern Windows domains. The other options don’t fit because Kerberos wasn’t originally developed by Microsoft and serves a different ticket-based approach, while OAuth and SAML are web-based authorization/SSO standards, not Microsoft’s challenge-response protocol.

NTLM is a challenge-response authentication protocol created by Microsoft for use in its Windows environments. In this approach, the server issues a random challenge to the client, and the client responds with a value derived from that challenge plus the user’s password hash. The server, which has the corresponding hash, can verify the response without ever sending the actual password over the network. This mechanism lets systems confirm identities securely during login or access requests. NTLM originated in the LAN Manager era and remains for compatibility, though Kerberos has largely taken its place in modern Windows domains. The other options don’t fit because Kerberos wasn’t originally developed by Microsoft and serves a different ticket-based approach, while OAuth and SAML are web-based authorization/SSO standards, not Microsoft’s challenge-response protocol.