How is a CAPTCHA checked in the backend authentication scenario?

See also: