nerdexam
CompTIA

SY0-501 · Question #276

The process of applying a salt and cryptographic hash to a password then repeating the process many times is known as which of the following?

The correct answer is C. Key stretching. The described process of repeatedly applying a salt and cryptographic hash to a password is a security technique designed to increase the computational cost of cracking passwords.

Submitted by hans_de· Mar 4, 2026General security concepts

Question

The process of applying a salt and cryptographic hash to a password then repeating the process many times is known as which of the following?

Options

  • ACollision resistance
  • BRainbow table
  • CKey stretching
  • DBrute force attack

How the community answered

(48 responses)
  • A
    19% (9)
  • B
    2% (1)
  • C
    71% (34)
  • D
    8% (4)

Why each option

The described process of repeatedly applying a salt and cryptographic hash to a password is a security technique designed to increase the computational cost of cracking passwords.

ACollision resistance

Collision resistance is a desirable property of a cryptographic hash function, meaning it is computationally infeasible to find two different inputs that produce the same output, rather than the iterative process of hashing a password multiple times.

BRainbow table

A rainbow table is a precomputed table used by attackers to reverse hash functions and recover passwords, which key stretching is specifically designed to mitigate, not the process itself.

CKey stretchingCorrect

Key stretching is a technique that intentionally slows down the process of hashing a password by repeatedly applying a cryptographic hash function (often with a salt) thousands or millions of times. This significantly increases the computational effort and time required for an attacker to perform brute-force or dictionary attacks against stored password hashes.

DBrute force attack

A brute force attack is an adversarial method of attempting to guess a password by systematically trying numerous combinations, which key stretching helps defend against, rather than being the defensive process described.

Concept tested: Password hashing and key stretching techniques

Source: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

Topics

#key stretching#password hashing#salt#PBKDF

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice