A developer is designing a new authentication system for a web application. The developer wants to store passwords securely and protect against both rainbow table attacks and brute-force attacks. Which password storage approach is the most secure among the following?

Store passwords using salted SHA-256 with a unique salt per user

Store passwords using unsalted SHA-256

Store passwords using bcrypt with a unique salt per user

Store passwords using MD5 with a global salt

A new system administrator notices that the company's password policy only requires 6 characters and does not enforce complexity. Which change is the most important first step to improve password security?

Implement account lockout after 3 failed attempts

Set passwords to expire every 30 days

Increase the minimum length to 12 characters

Require at least one symbol, number, and uppercase letter

EC-CouncilCertified Ethical Hacker

Domain 3Objective 2

Password Cracking and Attacks CEH Practice Questions (Page 9)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

8concepts

Questions 41–42

41application · medium
A developer is designing a new authentication system for a web application. The developer wants to store passwords securely and protect against both rainbow table attacks and brute-force attacks. Which password storage approach is the most secure among the following?
Select an answer first
42application · medium
A new system administrator notices that the company's password policy only requires 6 characters and does not enforce complexity. Which change is the most important first step to improve password security?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Password Cracking and Attacks CEH Practice Questions (Page 9)

Questions 41–42

A developer is designing a new authentication system for a web application. The developer wants to store passwords securely and protect against both rainbow table attacks and brute-force attacks. Which password storage approach is the most secure among the following?

A new system administrator notices that the company's password policy only requires 6 characters and does not enforce complexity. Which change is the most important first step to improve password security?

Keep studying — System Hacking Phases and Attack Techniques