GAQM CPEH-001 Exam - Topic 7 Question 46 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 46
Topic #: 7

Several of your co-workers are having a discussion over the etc/passwd file. They are at odds over what types of encryption are used to secure Linux passwords.(Choose all that apply.

ALinux passwords can be encrypted with MD5

BLinux passwords can be encrypted with SHA

CLinux passwords can be encrypted with DES

DLinux passwords can be encrypted with Blowfish

ELinux passwords are encrypted with asymmetric algrothims

Show Suggested Answer

Suggested Answer: A, C, D

Linux passwords are enrcypted using MD5, DES, and the NEW addition Blowfish. The default on most linux systems is dependant on the distribution, RedHat uses MD5, while slackware uses DES. The blowfish option is there for those who wish to use it. The encryption algorithm in use can be determined by authconfig on RedHat-based systems, or by reviewing one of two locations, on PAM-based systems (Pluggable Authentication Module) it can be found in /etc/pam.d/, the system-auth file or authconfig files. In other systems it can be found in /etc/security/ directory.

by Art at May 06, 2022, 11:55 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alline

4 months ago

Asymmetric algorithms for passwords? That sounds off...

upvoted 0 times

...

Joesph

4 months ago

Blowfish is still a solid choice for encryption!

upvoted 0 times

...

Chantay

4 months ago

DES is outdated, but it was used in the past.

upvoted 0 times

...

Maryann

4 months ago

I thought SHA was the standard for Linux passwords?

upvoted 0 times

...

Fatima

5 months ago

Linux passwords can definitely be encrypted with MD5.

upvoted 0 times

...

Celestina

5 months ago

Asymmetric algorithms seem out of place here; I don't recall them being used for password storage in Linux.

upvoted 0 times

...

Glendora

5 months ago

I practiced a question similar to this, and I think Blowfish is definitely one of the options for encrypting passwords.

upvoted 0 times

...

Valene

5 months ago

I remember reading that MD5 and SHA are both used for hashing passwords, but I'm not sure if they are still considered secure.

upvoted 0 times

...

Owen

5 months ago

I think DES was used in older systems, but I’m not confident if it's still relevant today.

upvoted 0 times

...

Desmond

5 months ago

Okay, I think I've got it. The objective of data portability is to empower the data subject to take control of their own personal information and move it as they see fit. B is the right answer.

upvoted 0 times

...

Eladia

5 months ago

This question looks straightforward, but I'll need to carefully read through each statement to determine which four are correct.

upvoted 0 times

...

Nada

5 months ago

I'm leaning towards the idea that working capital has increased, but I should double-check how the changes in receivables fit into that.

upvoted 0 times

...