CISSP® Certification Domain 3: Security Architecture and Engineering Video Boot Camp for 2022 - Hashing

The video tutorial explains hash functions, emphasizing their role in ensuring data integrity. It covers the concept of one-way functions, fixed and variable length outputs, and the importance of collision resistance. The tutorial discusses the use of hashing in verifying data integrity, such as in hard drives and downloaded files. It highlights the significance of secure password storage and the application of nonce in authentication protocols.

What is the primary purpose of a one-way function in hashing?

• To allow data decryption

• To ensure data integrity

• To provide confidentiality

• To enable data encryption

Why was MD5 considered insecure despite its widespread use?

• It required too much computational power

• It was vulnerable to collision attacks

• It produced variable-length hashes

• It was too slow for modern applications

Which of the following is a characteristic of SHA-1?

• It is considered collision-resistant

• It is no longer used in any applications

• It uses a 256-bit hash value

• It has weak collision avoidance

What is a unique feature of HAVAL compared to other hash functions?

• It allows choosing the output length

• It is slower than MD5

• It is not based on MD design principles

• It is only used for password hashing

How does salting enhance password security?

• By using a fixed salt for all passwords

• By storing the password in plaintext

• By adding random data to the password

• By encrypting the password

What is the purpose of a nonce in authentication protocols?

• To encrypt the communication

• To ensure the message is not replayed

• To store the password securely

• To provide a fixed identifier for users

What is a rainbow table used for?

• To encrypt passwords

• To store plaintext passwords

• To generate random passwords

• To compare hashed passwords with common passwords