Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 212-81 Exam - Topic 7 Question 15 Discussion

Posted by Andra on Feb 03, 2023 at 01:18 PM

In which of the following password protection technique, random strings of characters are added to the password before calculating their hashes?

Suggested Answer: C

RC4

https://en.wikipedia.org/wiki/RC4

RC4 (Rivest Cipher 4 also known as ARC4 or ARCFOUR meaning Alleged RC4, see below) is a stream cipher. While it is remarkable for its simplicity and speed in software, multiple vulnerabilities have been discovered in RC4, rendering it insecure. It is especially vulnerable when the beginning of the output keystream is not discarded, or when nonrandom or related keys are used. Particularly problematic uses of RC4 have led to very insecure protocols such as WEP.

The key-scheduling algorithm is used to initialize the permutation in the array 'S'. 'keylength' is defined as the number of bytes in the key and can be in the range 1 keylength 256, typically between 5 and 16, corresponding to a key length of 40 -- 128 bits. First, the array 'S' is initialized to the identity permutation. S is then processed for 256 iterations in a similar way to the main PRGA, but also mixes in bytes of the key at the same time.

Incorrect answers:

Blowfish -has a 64-bit block size and a variable key length from 32 bits up to 448 bits. It is a 16-round Feistel cipher and uses large key-dependent S-boxes. In structure it resembles CAST-128, which uses fixed S-boxes.

Twofish -is a symmetric key block cipher with a block size of 128 bits and key sizes up to 256 bits.

PIKE-stream cipher was invented by Ross Anderson to be a 'leaner and meaner' version of FISH after he broke FISH in 1994. Its name is supposed to be a humorous allusion to the pike fish.


Get Premium 212-81 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
35 comments · newest first
LI
Lisbeth 11 months ago
Wait, are we sure it's not double hashing? Sounds fishy!
ZO
Zona 11 months ago
I agree with Raylene, salting is crucial for security.
BI
Billye 12 months ago
Salting adds randomness to passwords, super important!
MI
Miriam 12 months ago
I thought it was A, keyed hashing?
RA
Raylene 1 year ago
It's definitely C, salting is the way to go!
AN
Anissa 1 year ago
I feel like I've seen a similar question before, and salting was the term used for adding random strings. I hope that's the right answer!
CO
Corinne 1 year ago
I'm a bit confused between salting and keyed hashing. They both seem to involve adding something to the password, but I can't recall the specifics.
AR
Arlyne 1 year ago
I remember practicing a question about hashing techniques, and salting was definitely mentioned. It seems like the most logical choice here.
KA
Karrie 1 year ago
I think the answer might be salting, but I'm not completely sure. It involves adding random data to the password, right?
JA
Jacqueline 1 year ago
Hmm, I'm a little unsure about this one. The question mentions that there might be more than one correct solution, so I'll need to think it through carefully.
RO
Roxane 1 year ago
I think employee theft is probably the most common crime investigated by private security, but I can't remember all the details about why.
MI
Mica 1 year ago
I'm pretty confident I know the right approach here. Enabling auto-updates and storing them in the Elastic Layer seems like the most efficient and secure option.
RO
Rolland 1 year ago
Okay, let me think this through. Nominal data is non-numerical, so it makes sense that complex arithmetic functions wouldn't work well. I'll go with True on this one.
KR
Kristeen 1 year ago
Key stretching, because who doesn't love a good workout for their passwords? Gotta keep those hackers on their toes!
KA
Karma 1 year ago
↳ replying to Kristeen
Key stretching definitely adds an extra layer of protection to passwords.
JU
Julieta 1 year ago
↳ replying to Kristeen
D) Key Stretching
EL
Eladia 1 year ago
↳ replying to Kristeen
I think salting is a great way to add extra security to passwords.
KE
Kelvin 1 year ago
↳ replying to Kristeen
C) Salting
DE
Denny 1 year ago
Salting, the ultimate seasoning for your password security. Spice up your life, and your login!
MA
Marilynn 1 year ago
↳ replying to Denny
D) Key Stretching
MA
Marguerita 1 year ago
↳ replying to Denny
C) Salting
AL
Allene 1 year ago
↳ replying to Denny
B) Double Hashing
MA
Ma 1 year ago
↳ replying to Denny
A) Keyed Hashing
LE
Leontine 1 year ago
Ah, the age-old question of password protection. Salting is the way to go, my friends. Keeps those hackers on their toes!
JE
Jean 1 year ago
↳ replying to Leontine
Salting is essential for protecting passwords, it's a must-have technique.
MI
Miles 1 year ago
↳ replying to Leontine
I think salting is the best option too, adds that extra layer of protection.
BA
Barb 1 year ago
↳ replying to Leontine
I agree, salting is definitely a great way to enhance password security.
PA
Paola 1 year ago
Double hashing? Sounds like a complicated way to do it. I'm going with the classic salting technique.
AN
Annamaria 1 year ago
↳ replying to Paola
I think salting is the way to go too, it adds that extra layer of security.
LE
Lenna 1 year ago
↳ replying to Paola
I agree, salting is a simple and effective way to protect passwords.
RO
Royal 2 years ago
I think key stretching is the answer here. Gotta make those password hashes extra secure!
CI
Ciara 2 years ago
I'm not sure, but I think it might be D) Key Stretching because it also adds complexity to the password before hashing.
PE
Peggie 2 years ago
Salting, of course! That's the best way to protect against rainbow table attacks.
MA
Marya 2 years ago
I agree with Nobuko, because salting adds random characters to the password before hashing for added security.
NO
Nobuko 2 years ago
I think the answer is C) Salting.
0/2000 characters

Save Cancel