SY0-501 · Question #185
In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?
The correct answer is A. Using salt. Salting is a method to safeguard password data by adding random data to each password before it is hashed and stored, making each hashed password unique.
Question
In terms of encrypting data, which of the following is BEST described as a way to safeguard password data by adding random data to it in storage?
Options
- AUsing salt
- BUsing hash algorithms
- CImplementing elliptical curve
- DImplementing PKI
How the community answered
(67 responses)- A70% (47)
- B18% (12)
- C4% (3)
- D7% (5)
Why each option
Salting is a method to safeguard password data by adding random data to each password before it is hashed and stored, making each hashed password unique.
Salting involves generating a unique, random string (the salt) for each password and combining it with the password before applying a hashing algorithm. This process ensures that even if two users have the same password, their stored hashes will be different, effectively preventing pre-computed rainbow table attacks and dictionary attacks against the password database.
Hashing algorithms transform data into a fixed-size string, but they do not inherently involve adding random data *to the password itself* prior to processing, which is the specific function of salt.
Elliptic Curve Cryptography (ECC) is a type of public-key cryptography used for encryption, digital signatures, and key exchange, not for adding random data to password hashes in storage.
Public Key Infrastructure (PKI) is a system for managing digital certificates and public/private key pairs to enable secure communication and authentication, not for directly salting password data.
Concept tested: Password Salting for Security
Source: https://learn.microsoft.com/en-us/azure/security/develop/security-best-practices-for-application-development
Topics
Community Discussion
No community discussion yet for this question.