During a forensic investigation, an incident handler extracts the authentication database from a compromised Linux server. The file contains entries like 'user1:$6$salt123$hashvalue' and 'user2:$6$salt456$hashvalue'. The handler notes that each user has a different salt. What is the primary security benefit of this observed storage scheme compared to unsalted hashes?

It prevents an attacker from using precomputed rainbow tables to crack all passwords at once.

It allows the system administrator to reverse the hash and recover the original password if needed.

It ensures that two users with the same password will have identical hash values for easy comparison.

It encrypts the passwords so that they cannot be read even with the hash value.

A company is migrating to a new identity provider (IdP) and must decide on a password policy. The security team is split between two options: (A) a policy requiring 12-character passwords with complexity, changed every 90 days, and (B) a policy requiring 16-character passphrases with no complexity requirements, changed only upon suspected compromise. Which policy is more secure and why?

Policy A is more secure because complexity and regular changes prevent password reuse and limit exposure

Policy A is more secure because complexity requirements make passwords harder to crack

Policy B is more secure because longer passphrases provide more entropy and are easier for users to remember, reducing risky behaviors

Both policies are equally secure because they both require a minimum length

Why is salting a password hash considered a security enhancement?

It eliminates the need for a strong password policy

It reduces the length of the stored hash

It ensures that identical passwords produce different hashes

A security architect is designing a new authentication system for a high-security environment. The system must resist offline cracking if the password database is stolen. The architect is considering using a slow hashing algorithm with a per-user salt. Which additional consideration is most important?

The hashing algorithm must be widely supported by the organization's existing applications.

The salt must be kept secret from the database.

The password hashes should be encrypted with a key stored in the application server.

The hashing algorithm should be memory-hard to increase the cost of custom hardware attacks.

GIAC Certified Incident Handler

Domain 4Objective 2

Understanding Passwords GCIH Practice Questions (Page 4)

Part of the Credential and Access Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

7concepts

Questions 16–20

16application · medium
During a forensic investigation, an incident handler extracts the authentication database from a compromised Linux server. The file contains entries like 'user1:$6$salt123$hashvalue' and 'user2:$6$salt456$hashvalue'. The handler notes that each user has a different salt. What is the primary security benefit of this observed storage scheme compared to unsalted hashes?
Select an answer first
17expert · hard
A company is migrating to a new identity provider (IdP) and must decide on a password policy. The security team is split between two options: (A) a policy requiring 12-character passwords with complexity, changed every 90 days, and (B) a policy requiring 16-character passphrases with no complexity requirements, changed only upon suspected compromise. Which policy is more secure and why?
Select an answer first
18foundation · easy
Why is salting a password hash considered a security enhancement?
Select an answer first
19expert · hard
A security architect is designing a new authentication system for a high-security environment. The system must resist offline cracking if the password database is stolen. The architect is considering using a slow hashing algorithm with a per-user salt. Which additional consideration is most important?
Select an answer first
20application · medium
A helpdesk analyst is resetting a user's password. The user asks for a password that is easy to remember. Which of the following passwords is the strongest while still being memorable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.

Understanding Passwords GCIH Practice Questions (Page 4)

Questions 16–20

Why is salting a password hash considered a security enhancement?

A helpdesk analyst is resetting a user's password. The user asks for a password that is easy to remember. Which of the following passwords is the strongest while still being memorable?

Keep studying — Credential and Access Security