Discuss Cyber AB CMMC-CCA Exam Topic 4 Question 11

During an assessment, the IT security engineers responsible for password policy for the OSC provided documentation that all passwords are protected using a one-way hashing methodology. As a result, which statement is true?

APasswords are protected in storage and in transit.

BPasswords are transmitted across the network as clear cipher-text.

CThe password protection allows access but not authorization to assets.

DThe transformation makes it impossible to re-convert the hashed password.

Suggested Answer: D

A one-way hash function is a cryptographic method used to store passwords securely. It is not reversible; hashed values cannot be converted back into the original password.

Extract from SC.L2-3.13.10:

''Store and transmit authentication information in a protected form by using one-way cryptographic transformations (e.g., hashing). One-way transformations cannot be reversed to reveal the original authentication secret.''

Thus, the correct statement is that the transformation makes it impossible to re-convert the hashed password.

Get Premium CMMC-CCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Annabelle 3 months ago

But A sounds good too. Protection in storage is important.

Chau 3 months ago

I agree, D makes sense. Security is key!

Carin 3 months ago

I think D is true. Hashing can't be reversed.

Andrew 3 months ago

C) doesn't really make sense in this context.

Jacklyn 3 months ago

Wait, are we sure about that?

Frankie 4 months ago

D) sounds right, you can't reverse a hash.

Omer 5 months ago

I disagree, B) is misleading.

Lashanda 5 months ago

A) is correct, passwords are protected in storage.

Dorinda 6 months ago

I think option C is misleading because hashing doesn't provide access; it just protects the password itself. So I lean towards D being the right answer.

Kiley 6 months ago

I feel like I've seen a question like this before, and it was about how hashing protects passwords, but it doesn't necessarily mean they're safe in transit.

Dominga 6 months ago

I'm not entirely sure, but I think hashed passwords are still vulnerable during transmission unless they're encrypted. So A might not be true?

Dorathy 6 months ago

I remember discussing how one-way hashing means you can't easily revert to the original password, so maybe D is correct?

Cyber AB CMMC-CCA Exam - Topic 4 Question 11 Discussion