A system stores user passwords as plain SHA-256 hashes without salt. An auditor warns that this is vulnerable to rainbow-table attacks. The team wants to keep using SHA-256 but mitigate the risk. Which change best addresses the auditor's concern?

EC-CouncilCertified Encryption Specialist

Domain 2Objective 3

Hashing Algorithms (MD5, SHA, RIPEMD, Tiger, Whirlpool) and HMAC ECES Practice Questions (Page 9)

Part of the Symmetric Cryptography and Hashing domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

9concepts

Questions 41–41

41application · medium
A system stores user passwords as plain SHA-256 hashes without salt. An auditor warns that this is vulnerable to rainbow-table attacks. The team wants to keep using SHA-256 but mitigate the risk. Which change best addresses the auditor's concern?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.

Hashing Algorithms (MD5, SHA, RIPEMD, Tiger, Whirlpool) and HMAC ECES Practice Questions (Page 9)

Questions 41–41

A system stores user passwords as plain SHA-256 hashes without salt. An auditor warns that this is vulnerable to rainbow-table attacks. The team wants to keep using SHA-256 but mitigate the risk. Which change best addresses the auditor's concern?

Keep studying — Symmetric Cryptography and Hashing