Study. uk . com
  1. Home
  2. All questions
  3. Question 560

CompTIA Security+ study material · question 560 of 611

An attacker steals a table of salted password hashes. What can they do with it directly?

  1. Nothing directly; they must guess candidate passwords and compare
  2. Recover the passwords by reversing the hash function
  3. Log in as any user immediately
  4. Decrypt the hashes using the salt
Show the answer

Answer: A. Nothing directly; they must guess candidate passwords and compare

A hash cannot be reversed, so the attacker's only route is to hash candidates and look for a match.

Source: OWASP Password Storage Cheat Sheet (OWASP) — OWASP Password Storage Cheat Sheet › Hashing vs Encryption

Challenge yourself on this topic → Study as cards