Exam SY0-501 topic 1 question 723 discussion

If this comes up I'm putting down SHA-1. At least I fail with dignity.

I agree D, AES is for encryption not hashing

SHA1=160bits

you protect password with hash algorithm not with encryption algorithm Answer is D Sha 1 A hash is not ‘encryption’ – it cannot be decrypted back to the original text (it is a ‘one-way’ cryptographic function, and is a fixed size for any size of source text). This makes it suitable when it is appropriate to compare ‘hashed’ versions of texts, as opposed to decrypting the text to obtain the original version.

MD5=128 bits, SHA1=160bits, RIPEMD is up to 320 bits.

D should be the answer. AES not used for hashing and only MD5 and SHA1 in this question are used for hashing. When compared SHA1 is more secure

Strong algorithms • PGP, AES

I think the first sentence is placed to throw us off. The real question is what algorithm is uncrackable by offline brute force attack- in that case AES. even though AES is not a hashing algo, they are not asking what's used to hash; they are simply asking what stands better agains an off-line brute force.

Oline brute force attack= SHA-1 Offline brute force attack=AES

"Which of the following would offer the BEST protection ". MD5 and SHA-1 are hashing algorithms. They don't provide protection. AES is correct.

This question is wrong, there’s a mistake on the 3rd choice, it should be : C. RIPEMD Which is more secure than MD5 & SHA. Much more reliable source : A security administrator is choosing an algorithm to generate password hashes. Which would offer the BEST protection against offline brute force attacks? MD5, 3DES, RIPEMD, SHA-1

I will go with SHA-1 unless the moderators can provide a valid reason they choose AES. I hope they aint just doing copy and paste

Keyword: Password Hashes. So it cannot be AES. It must be D (SHA1), because it is more secure than MD5.

AES is the correct answer. Whirlpool is a HASH that uses modified version of AES.

D is the correct answer here. MD5 and SHA-1 are both hashing algorithm but SHA-1 is a better hashing algorithm

Agreed D is correct

Sorry type. Old tablet lol the correct answer is C. the key word is "offline" if a hacker steals the hashes and then takes them home to try brute force. He wont be able to crack rhe the hash if it is encrypted. I did some research on this. EE times website says the AES is prevents offline brute force attacks