Which statement is correct about WWW-Authenticate header?
A.
It is request header used only with Basic Authentication to send username and password to a
proxy or a Web server
B.
It is a request header used to send credentials
C.
It is a response header used with HTTP 401 status code to negotiate method of authentication
and send NTLM challenge to the client.
The right answer is C. See this reference:
https://en.wikipedia.org/wiki/Basic_access_authentication#Server_side
Correct answer is B