Which of the following statements about the form-based authentication are true?

It provides a weaker security check than the HTTP Digest and HTTPS Client authentications.

It requires a hidden field that supplies the login-constraint used by the application.

It requires that the action of the login form must be j_security_check.

It transmits username and password over the network in the form of Base64 encoding.