nerdexam
CompTIA

SY0-501 · Question #185

In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?

The correct answer is A. Using salt. Salting is a method to safeguard password data by adding random data to each password before it is hashed and stored, making each hashed password unique.

Submitted by skyler.x· Mar 4, 2026General security concepts

Question

In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?

Options

  • AUsing salt
  • BUsing hash algorithms
  • CImplementing elliptical curve
  • DImplementing PKI

How the community answered

(67 responses)
  • A
    70% (47)
  • B
    18% (12)
  • C
    4% (3)
  • D
    7% (5)

Why each option

Salting is a method to safeguard password data by adding random data to each password before it is hashed and stored, making each hashed password unique.

AUsing saltCorrect

Salting involves generating a unique, random string (the salt) for each password and combining it with the password before applying a hashing algorithm. This process ensures that even if two users have the same password, their stored hashes will be different, effectively preventing pre-computed rainbow table attacks and dictionary attacks against the password database.

BUsing hash algorithms

Hashing algorithms transform data into a fixed-size string, but they do not inherently involve adding random data *to the password itself* prior to processing, which is the specific function of salt.

CImplementing elliptical curve

Elliptic Curve Cryptography (ECC) is a type of public-key cryptography used for encryption, digital signatures, and key exchange, not for adding random data to password hashes in storage.

DImplementing PKI

Public Key Infrastructure (PKI) is a system for managing digital certificates and public/private key pairs to enable secure communication and authentication, not for directly salting password data.

Concept tested: Password Salting for Security

Source: https://learn.microsoft.com/en-us/azure/security/develop/security-best-practices-for-application-development

Topics

#password salting#cryptography#password storage#hashing

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice