Exam 312-50v12 topic 1 question 312 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 312
Topic #: 1

Ethical hacker Jane Doe is attempting to crack the password of the head of the IT department of ABC company. She is utilizing a rainbow table and notices upon entering a password that extra characters are added to the password after submitting.

What countermeasure is the company using to protect against rainbow tables?

A. Password key hashing
B. Password salting
C. Account lockout
D. Password hashing

Show Suggested Answer

Suggested Answer: B 🗳️

by Lennin at Feb. 21, 2025, 9:07 a.m.

Comments

Submit Cancel

Lennin

3 months, 2 weeks ago

Selected Answer: B

The correct answer is B. Password salting. Salting involves adding random data (the "salt") to a password before it is hashed. This makes each password hash unique, even if two users have the same password. By adding extra characters or salt to the password before it is hashed, it becomes much more difficult for attackers to use rainbow tables, which rely on precomputed hash values. A. Password key hashing refers to hashing passwords, but it doesn’t provide protection against rainbow tables unless combined with salting. C. Account lockout is a security measure to block access after a number of failed login attempts, not specifically related to rainbow tables. D. Password hashing alone, without salting, can still be vulnerable to rainbow tables.

upvoted 1 times

...