OWASP Vulnerabilities · interview question
Why should password hashing include a 'salt' when storing user credentials?
Multiple choiceMediumchapter-17-curatedpremiumowasp-vulnerabilitiescross-site-scripting-xss
Answer and explanation
Correct answer
C. To ensure each hash is unique even for identical passwords
Why
Salting adds a unique value to each password before hashing, ensuring that even identical passwords result in different hashes. This makes it difficult for attackers to use precomputed tables like rainbow tables.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential limitation of using only CSRF tokens for preventing CSRF attacks in an interview?
- In a Spring Security filter chain, what is the purpose of filters?
- What role does the 'Signature' play in a JWT?
- Why does the 'signature' in a JWT matter in this design?
- How would you explain a key strategy Java web applications use to protect against Stored XSS attacks in an interview?
- Which of the following best describes a CSRF attack?