70-516 · Question #21
You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4.0 to create an application. The application connects to a Microsoft SQL Server database. The application stores user names and…
The correct answer is D. Append a random salt to the password by using the RNGCryptoServiceProvider class. SHA1CryptoServiceProvider Class Computes the SHA1 hash value for the input data using the implementation provided by the cryptographic service provider (CSP). This class cannot be SHA1CryptoServiceProvider Class…
Question
You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4.0 to create an application. The application connects to a Microsoft SQL Server database. The application stores user names and passwords in the database. You need to ensure that users cannot read passwords extracted from the database. What should you do?
Options
- AEncrypt stored passwords by using the RC2CryptoServiceProvider class.
- BEncrypt stored passwords by using the TripleDESCryptoServiceProvider class.
- CAppend a random salt to the password by using the RNGCryptoServiceProvider class.
- DAppend a random salt to the password by using the RNGCryptoServiceProvider class.
How the community answered
(18 responses)- A17% (3)
- B6% (1)
- C6% (1)
- D72% (13)
Explanation
SHA1CryptoServiceProvider Class Computes the SHA1 hash value for the input data using the implementation provided by the cryptographic service provider (CSP). This class cannot be SHA1CryptoServiceProvider Class us/library/system.security.cryptography.sha1cryptoserviceprovider.aspx) CHAPTER 8 Developing Reliable Applications Lesson 3: Protecting Your Data Hashing and Salting (page 550-551)
Topics
Community Discussion
No community discussion yet for this question.