ISC Exam Questions

what is it used for in a Linux or Unix system?

What is a salt and what is it used for in a Linux or Unix system?

A.
A salt is a value that is used to encrypt passwords before they are stored inthe registry.

B.
A salt is a value that adds randomness to the process of encrypting passwords.

C.
A salt is also called a shadow file, and is not readable by all users.

D.
A salt is the utility that is used to encrypt and hash passwords.

Explanation:
UNIX and Linux systems, do not use registries and SAM databases, but contain their user passwords in a file called /etc/passwd. A password is used to encrypt a block of bits with a one-way function and the resulting value is stored in this file. Salts are random values that are added to the encryption process to add more randomness. The more randomness to the encryption process, the harder it is for attackers to decrypt and uncover your password.