nerdexam
LPI

010-160 · Question #44

Which one of the following statements concerning Linux passwords is true?

The correct answer is D. Passwords are only stored in encrypted form. Linux stores passwords as one-way cryptographic hashes in /etc/shadow, making the original password unrecoverable from the stored value.

Security and File Permissions

Question

Which one of the following statements concerning Linux passwords is true?

Options

  • AAll passwords can be decrypted using the system administrator's master password.
  • BPasswords may never start with a non-letter.
  • CUsers cannot change their password once it has been set.
  • DPasswords are only stored in encrypted form.
  • EPasswords may be at most six characters long.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    7% (2)
  • D
    90% (27)

Why each option

Linux stores passwords as one-way cryptographic hashes in /etc/shadow, making the original password unrecoverable from the stored value.

AAll passwords can be decrypted using the system administrator's master password.

Passwords are stored as irreversible hashes, not encrypted values; no master password or key can reverse a cryptographic hash.

BPasswords may never start with a non-letter.

Linux places no restriction on the first character of a password; digits, symbols, and any printable character are all valid starting characters.

CUsers cannot change their password once it has been set.

Users can change their own password at any time by running the passwd command; no administrative lock prevents self-service password changes.

DPasswords are only stored in encrypted form.Correct

Linux uses one-way hashing algorithms such as SHA-512 or bcrypt to transform passwords before storage in /etc/shadow. Because hashing is irreversible, the plaintext password cannot be reconstructed from the hash, meaning even the system administrator cannot read or decrypt a user's password.

EPasswords may be at most six characters long.

Modern Linux systems support passwords far longer than six characters; PAM-based policies typically allow 72 or more characters depending on the hashing algorithm used.

Concept tested: Linux password one-way hashing and shadow file storage

Source: https://man7.org/linux/man-pages/man5/shadow.5.html

Topics

#password storage#encryption#/etc/shadow#Linux security

Community Discussion

No community discussion yet for this question.

Full 010-160 Practice