Multiple choice technology security

What is used as the salt value in the hash function available in the TCS SAPI?

  1. A constant value stored as plain text within a configuration file

  2. There is no salt added while calculating the hash value

  3. The accountName is used as the salt value

  4. The salt value is calculated from the password value

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The hash function uses accountName as the salt value. This ensures each account has a unique salt, preventing rainbow table attacks even if two users have the same password. A constant salt would be ineffective, and using the password itself as salt would defeat the purpose.