Study. uk . com
  1. Home
  2. All questions
  3. Question 532

CompTIA Security+ study material · question 532 of 611

How does a pepper differ from a salt?

  1. A pepper is shared across passwords, kept secret, and stored apart from the database
  2. A pepper is generated by the user
  3. A pepper replaces the need for a work factor
  4. A pepper is unique per password and stored with the hash
Show the answer

Answer: A. A pepper is shared across passwords, kept secret, and stored apart from the database

A salt is public and unique per password; a pepper is a secret shared across them, which is why its storage matters.

Source: OWASP Password Storage Cheat Sheet (OWASP) — OWASP Password Storage Cheat Sheet › Peppering

Challenge yourself on this topic → Study as cards