010-160 · Question #44
Which one of the following statements concerning Linux passwords is true?
The correct answer is D. Passwords are only stored in encrypted form. Linux stores passwords as one-way cryptographic hashes in /etc/shadow, making the original password unrecoverable from the stored value.
Question
Options
- AAll passwords can be decrypted using the system administrator's master password.
- BPasswords may never start with a non-letter.
- CUsers cannot change their password once it has been set.
- DPasswords are only stored in encrypted form.
- EPasswords may be at most six characters long.
How the community answered
(30 responses)- A3% (1)
- B7% (2)
- D90% (27)
Why each option
Linux stores passwords as one-way cryptographic hashes in /etc/shadow, making the original password unrecoverable from the stored value.
Passwords are stored as irreversible hashes, not encrypted values; no master password or key can reverse a cryptographic hash.
Linux places no restriction on the first character of a password; digits, symbols, and any printable character are all valid starting characters.
Users can change their own password at any time by running the passwd command; no administrative lock prevents self-service password changes.
Linux uses one-way hashing algorithms such as SHA-512 or bcrypt to transform passwords before storage in /etc/shadow. Because hashing is irreversible, the plaintext password cannot be reconstructed from the hash, meaning even the system administrator cannot read or decrypt a user's password.
Modern Linux systems support passwords far longer than six characters; PAM-based policies typically allow 72 or more characters depending on the hashing algorithm used.
Concept tested: Linux password one-way hashing and shadow file storage
Source: https://man7.org/linux/man-pages/man5/shadow.5.html
Topics
Community Discussion
No community discussion yet for this question.