Which two are considered good security practices when using passwords? (Choose two.)

Question

Options

• AUse one-way encryption for storage of passwords.
• BStore passwords external to the database.
• CChoose short passwords to save on storage space.
• DUse simple keyboard actions that give mixed letters.
• EDo not use dictionary-based words.

• A
  92% (36)
• C
  5% (2)
• D
  3% (1)

Explanation

Storing passwords with one-way (hashing) encryption (A) ensures that even if attackers access your database, they cannot reverse the hash to recover the original password. Avoiding dictionary-based words (E) protects against dictionary attacks, where attackers systematically try common words and phrases.

The distractors fail because: storing passwords external to the database (B) doesn't inherently improve security and can introduce new attack surfaces; short passwords (C) reduce the keyspace and are far easier to brute-force; and simple keyboard patterns like "qwerty" or "asdf" (D) are among the first sequences attackers try, despite appearing "mixed."

Memory tip: Think Hash it, Avoid dictionaries - "HA!" - the two things that actually make passwords safer to store and harder to guess.

No community discussion yet for this question.