Lesson 4 Quiz

How are passwords stored when using hashing?

• In plaintext for quick access

• As encrypted text with a decryption key

• As irreversible scrambled data using a hash function

• As compressed strings

When you sign up for a website, your password is passed through a ____________ function and the output digest is stored on the server.

It is the process of converting a password into an irreversible, scrambled output, making it unreadable even to the website owner.

Which of the following is true about hashing?

• It can be reversed using a decryption key.

• The same input always produces the same hash output.

• It requires storing the decryption key on the server.

• It reveals passwords in case of a breach.

A major risk in hashing is a ____________, where two different inputs produce the same output digest.

It is a unique, random value added to the end of a password before hashing to avoid identical hashes for the same passwords.

Which of the following statements about salting is correct?

• The same salt is used for every user.

• Salt values are stored with the hash in the database.

• Salt values are not stored anywhere.

• Salt makes the hash weaker.

Which technique adds a fixed, secret value to all passwords and does not need to be stored in the database?

• Hashing

• Salting

• Peppering

• Compressing

If even one bit of input changes, the hash output must change significantly. This behavior is known as the __________ effect.

It is the technique where the same secret value is added to each password before hashing, but unlike salting, this value isn’t stored on the server.