A user is evaluating the security infrastructure of a company and notices that some authentication systems are not using best practices when it comes to storing passwords. The user is able to crack passwords very fast and access sensitive data. The user wants to present a recommendation to the company on the proper implementation of salting to avoid password cracking techniques. What are three best practices in implementing salting? (Choose three.)

  • A salt must be unique.
  • A salt should be unique for each password.
  • A salt should not be reused.
  • Salts are not an effective best practice.
  • Salts should be short.
  • The same salt should be used for each password.

К сожалению, у нас пока нет статистики ответов на данный вопрос, но мы работаем над этим.