A penetration tester accessed a database and viewed all the user information in order to access an application. However, the passwords for the application did not work. Which of the following is…

The correct answer is C. The passwords are hashed. When a penetration tester retrieves user information from a database, passwords are often stored in a hashed format for security. Hashing is a one- way process used to transform passwords into a fixed-length value, making it impossible to retrieve the original password directly…

Post-exploitation and lateral movement

Question

A penetration tester accessed a database and viewed all the user information in order to access an application. However, the passwords for the application did not work. Which of the following is most likely the issue in this situation?

Options

AThe application changes passwords often.
BThe database belongs to another application.
CThe passwords are hashed.
DThe database is encrypted.

How the community answered

(25 responses)

A
8% (2)
C
88% (22)
D
4% (1)

Explanation

When a penetration tester retrieves user information from a database, passwords are often stored in a hashed format for security. Hashing is a one- way process used to transform passwords into a fixed-length value, making it impossible to retrieve the original password directly from the hash. This means the passwords retrieved from the database cannot be used directly to log in to the

Topics

#Password hashing#Database security#Credential storage

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice