A developer needs to improve the cryptographic strength of a password-storage component in a web application without completely replacing the crypto-module. Which of the following is the most…

The correct answer is E. Key stretching. Key stretching enhances the security of stored passwords by applying computationally intensive algorithms (e.g., bcrypt, PBKDF2) to make brute-force attacks more difficult, without replacing the underlying crypto-module.ks.

Submitted by rania.sa· Mar 6, 2026Security Engineering

Question

A developer needs to improve the cryptographic strength of a password-storage component in a web application without completely replacing the crypto-module. Which of the following is the most appropriate technique?

Options

AKey splitting
BKey escrow
CKey rotation
DKey encryption
EKey stretching

How the community answered

(34 responses)

A
3% (1)
B
12% (4)
C
6% (2)
D
3% (1)
E
76% (26)

Explanation

Key stretching enhances the security of stored passwords by applying computationally intensive algorithms (e.g., bcrypt, PBKDF2) to make brute-force attacks more difficult, without replacing the underlying crypto-module.ks.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice