ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 343 - SY0-601 discussion

Report
Export

Which of the following can be used by an authentication application to validate a user's credentials without the need to store the actual sensitive data?

A.
Salt string
Answers
A.
Salt string
B.
Private Key
Answers
B.
Private Key
C.
Password hash
Answers
C.
Password hash
D.
Cipher stream
Answers
D.
Cipher stream
Suggested answer: C

Explanation:

Password hash is a method of storing a user’s credentials without the need to store the actual sensitive data. A password hash is a one-way function that transforms the user’s password into a fixed-length string of characters that cannot be reversed. The authentication application can then compare the password hash with the stored hash to validate the user’s credentials without revealing the original password. Reference: 1 CompTIA Security+ Certification Exam Objectives, page 15, Domain 3.0: Implementation, Objective 3.5: Implement secure authentication mechanisms 2 CompTIA Security+ Certification Exam Objectives, page 16, Domain 3.0:

Implementation, Objective 3.6: Implement identity and account management best practices 3 https://www.comptia.org/blog/what-is-password-hashing

asked 02/10/2024
Grzegorz GÅ‚ogowski
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first