PrepAway - Latest Free Exam Questions & Answers

Which of the followingis a true statement pertaining to the use of salts?

Unix and Linux systems use salts when storing passwords. Which of the followingis a true statement pertaining to the use of salts?

PrepAway - Latest Free Exam Questions & Answers

A.
The use of different salts means that the same password could end up indifferent formats.

B.
Salts provide the same functionality of Syskey, but encrypting the full passwordfile.

C.
Salts are used when passwords are held in a shadow file, which decreases theprotection level of the passwords.

D.
The use of different salts means that an attacker will have an easier time ofuncovering encrypted passwords.

Explanation:
Salts are random values that are added to the encryption process to add morerandomness. The more randomness to the encryption process, the harder it is for thebad guy to decrypt and uncover your password. The use of a salt means that the samepassword can be encrypted into 4096 different formats, which it makes it much moredifficult for an attacker to uncover the right format for your system.


Leave a Reply