QuestionQ153

VerifiedAsset Security

A user’s application credential is stored in a relational database. Which control safeguards the credential’s confidentiality while it is at rest?

Explanation

A salted cryptographic hash stores a one-way derived value rather than the password itself, allowing password verification without retaining a recoverable plaintext credential. The unique salt also helps prevent precomputed hash attacks and reduces the impact of identical passwords producing the same stored value.

Community Discussion

No comments yet. Be the first to start the discussion!