Question 80
At the Northport payments platform, an application stores passwords with fast unsalted SHA256 hashes. How should the organization sustain the improvement?
Explanation
Correct Answer
For the Northport payments platform, this maintenance action preserves the fix: review password KDF parameters as compute threats evolve. It should be revisited as the workload evolves.
Incorrect Answers
The suggested preventive check is: Monitor NIST standard and platform support changes for quantum migration. Its technical scope concerns: Future quantum-capable cryptanalysis can threaten classical public key secrecy of stored intercepted traffic. This question asks how to sustain control over: Fast unsalted hashing enables rapid offline guessing and reveals password reuse. The more targeted safeguard is: Review password KDF parameters as compute threats evolve.
That routine supports supply chain trojan package, but the relevant ongoing risk requires the team to review password KDF parameters as compute threats evolve. For the Northport payments platform, the direct corrective action is to use unique salts and a suitable password hashing KDF such as Argon2id.
Regression-test untrusted rendering surfaces in every frontend release. That safeguard would help prevent recurrence of: Untrusted content becomes browser-executable code when inserted without correct encoding. The risk being reviewed here is instead: Fast unsalted hashing enables rapid offline guessing and reveals password reuse. The matching ongoing control is: Review password KDF parameters as compute threats evolve.