Study. uk . com
  1. Home
  2. All questions
  3. Question 558

CompTIA Security+ study material · question 558 of 611

Why does SHA-1 still appear in some systems despite being unsuitable for new designs?

  1. It survives only in legacy compatibility paths, and NIST disallows it for new use after 2030
  2. It is required by FIPS 140 validation
  3. It is faster than SHA-256 for large inputs
  4. It remains approved for digital signatures
Show the answer

Answer: A. It survives only in legacy compatibility paths, and NIST disallows it for new use after 2030

Existing deployments are being retired on a published timeline; no new design should select it.

Source: OWASP Password Storage Cheat Sheet (OWASP) — OWASP Password Storage Cheat Sheet › PBKDF2

Challenge yourself on this topic → Study as cards