Discuss GAQM CPEH-001 Exam Topic 7 Question 46

Several of your co-workers are having a discussion over the etc/passwd file. They are at odds over what types of encryption are used to secure Linux passwords.(Choose all that apply.

ALinux passwords can be encrypted with MD5

BLinux passwords can be encrypted with SHA

CLinux passwords can be encrypted with DES

DLinux passwords can be encrypted with Blowfish

ELinux passwords are encrypted with asymmetric algrothims

Suggested Answer: A, C, D

Linux passwords are enrcypted using MD5, DES, and the NEW addition Blowfish. The default on most linux systems is dependant on the distribution, RedHat uses MD5, while slackware uses DES. The blowfish option is there for those who wish to use it. The encryption algorithm in use can be determined by authconfig on RedHat-based systems, or by reviewing one of two locations, on PAM-based systems (Pluggable Authentication Module) it can be found in /etc/pam.d/, the system-auth file or authconfig files. In other systems it can be found in /etc/security/ directory.

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Alline 12 months ago

Asymmetric algorithms for passwords? That sounds off...

Joesph 12 months ago

Blowfish is still a solid choice for encryption!

Chantay 1 year ago

DES is outdated, but it was used in the past.

Maryann 1 year ago

I thought SHA was the standard for Linux passwords?

Fatima 1 year ago

Linux passwords can definitely be encrypted with MD5.

Celestina 1 year ago

Asymmetric algorithms seem out of place here; I don't recall them being used for password storage in Linux.

Glendora 1 year ago

I practiced a question similar to this, and I think Blowfish is definitely one of the options for encrypting passwords.

Valene 1 year ago

I remember reading that MD5 and SHA are both used for hashing passwords, but I'm not sure if they are still considered secure.

Owen 1 year ago

I think DES was used in older systems, but I’m not confident if it's still relevant today.

Desmond 1 year ago

Okay, I think I've got it. The objective of data portability is to empower the data subject to take control of their own personal information and move it as they see fit. B is the right answer.

Eladia 1 year ago

This question looks straightforward, but I'll need to carefully read through each statement to determine which four are correct.

Nada 1 year ago

I'm leaning towards the idea that working capital has increased, but I should double-check how the changes in receivables fit into that.

GAQM CPEH-001 Exam - Topic 7 Question 46 Discussion