A security administrator is reviewing the following output from an offline password audit: Which of the following should the systems administrator implement to BEST address this audit finding?…

The correct answer is B. Bcrypt D. PBKDF2. You should never use a hash to store passwords (subject to rainbowtable attacks). Actually, bcrypt and PBKDF2 are being replaced by other algorithms, but for this question it is the

Enterprise Security Architecture

Question

A security administrator is reviewing the following output from an offline password audit:

Which of the following should the systems administrator implement to BEST address this audit finding? (Choose two.)

Options

ACryptoprocessor
BBcrypt
CSHA-256
DPBKDF2
EMessage authentication

How the community answered

(43 responses)

A
14% (6)
B
77% (33)
C
5% (2)
E
5% (2)

Explanation

You should never use a hash to store passwords (subject to rainbowtable attacks). Actually, bcrypt and PBKDF2 are being replaced by other algorithms, but for this question it is the

Topics

#password hashing#bcrypt#PBKDF2#key stretching

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice