Certified In Cybersecurity CC · Free Practice Question Easy
Question 23
What is the primary purpose of using hashing for password storage?
-
A
To make passwords impossible to crack.
-
B
To provide a way to retrieve forgotten passwords.
-
C
To ensure the confidentiality of passwords.
-
D
To enforce complex password requirements.
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C) To ensure the confidentiality of passwords.
The primary purpose of using hashing for password storage is to ensure that passwords are stored in a way that protects their confidentiality. By hashing passwords, the actual plaintext passwords are not stored, reducing the risk of unauthorized access if the stored data is compromised.
Incorrect Answers:
A) To make passwords impossible to crack - Incorrect. While hashing adds a layer of security to password storage, it does not make passwords impossible to crack. With sufficient computational resources and time, it is still possible to perform a brute-force or dictionary attack on hashed passwords.
B) To provide a way to retrieve forgotten passwords - Incorrect. Hashing is a one-way function, meaning that it is not possible to reverse the process and retrieve the original password from the hashed value. Password retrieval mechanisms typically involve other approaches such as password reset procedures.
D) To enforce complex password requirements - Incorrect. While password hashing does not directly enforce complex password requirements, it is a common practice in password security to require users to choose strong passwords that are resistant to brute-force attacks. Complex password requirements can be implemented separately from the hashing process.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
