Q
How should user passwords be stored?
-
A
Encrypted with AES, so they can be decrypted later
-
B
In plain text in a secure database
-
C
As salted hashes using a slow algorithm such as bcrypt, scrypt, or Argon2
-
D
As MD5 hashes
Correct Answer:
C. As salted hashes using a slow algorithm such as bcrypt, scrypt, or Argon2
Explanation:
Fast hashes such as MD5 and SHA-1 are easy to brute-force, and encryption can be reversed.
