Salting for One-Way Hash Complexity | SY0-701

Explain the importance of using appropriate cryptographic solutions.

Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

  1. Key stretching
  2. Data masking
  3. Steganography
  4. Salting Correct Answer
Answer Correct answer: D — Salting involves adding a unique, random value to the input data before applying a one-way hash algorithm to ensure distinct outputs and prevent precomputed attacks.

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The exam tests your ability to distinguish between techniques that increase computational cost (key stretching) versus those that add unique input data (salting). The common trap is confusing these two password-hardening methods.

This question tests the specific cryptographic technique of adding random data to inputs before hashing. Salting is the correct answer because it directly addresses the need for extra complexity to defeat precomputed attacks.

Candidates often select Key Stretching, which involves iterative hashing to slow down attackers, rather than salting, which adds a random value to the input to ensure unique hashes.

Community Discussion (18 comments)

lauren2wright 👍 17
D. Salting Salting involves adding random data to the input of a one-way hash function to ensure that the same input will produce different hash values, thus making it more difficult for attackers to use precomputed hash tables (rainbow tables) to reverse engineer the original input.
JackExam2025 👍 3 Selected: D
Salting is primarily used to ensure that even if two users have the same password, their hashes will differ due to the unique random salt added to each password before hashing. This helps prevent attacks like rainbow table attacks, where precomputed hash values are used to reverse the hash back to the original password.
23711ec 👍 1 Selected: D
correct answer
Hasss 👍 1 Selected: C
The extra complexity added before a one-way data transformation algorithm is salting,
AryzBeats 👍 1 Selected: D
Salting is used to add complexity to the input of a one-way hash
Laraa 👍 2 Selected: D
Salting is a technique used to add extra complexity to data, such as passwords, before applying a one-way transformation algorithm like hashing. The salt is a random value that is combined with the input data (e.g., a password) to produce a unique output even if the input data is the same. This process prevents attacks such as rainbow table attacks and ensures that identical inputs do not result in identical hashes.
SHAGZZ 👍 1 Selected: D
salting in simpler terms is adding a random character before performing the hash(one way function algorithm)
way12 👍 1 Selected: C
salting is used to enhance further security. salt is added to the input data before hashing
JRCHENRY 👍 1 Selected: D
Salting is used to add extra complexity before using a one-way data transformation algorithm.
88d4601 👍 1 Selected: C
Salting
buzzor 👍 1
salting is adding of random data to an existing hash to in order to increase the integrity of the hash by then performing a hash function producing hash values. it is used to prevent rainbow table attack (using precomputed hash tables).
ermahasra 👍 4 Selected: D
D. Salting In the context of CompTIA Security+, salting is a technique used to enhance the security of stored passwords. It involves adding a random value, known as a "salt," to a password before hashing it. This process helps to prevent various types of attacks, such as rainbow table attacks and certain brute-force attacks.
[Removed] 👍 2 Selected: D
D. Salting Salting is used to add extra complexity before using a one-way data transformation algorithm, such as a hash function. Salting involves adding a unique, random value to the input data before it is processed by the hash function, making it more resistant to certain types of attacks like rainbow table attacks.
Lanka22 👍 1 Selected: D
Salting
oluabi.salami 👍 1 Selected: D
D. Salting
MAKOhunter33333333 👍 4 Selected: D
Key stretching is used for weak keys, it will hash the pw, then hash that, then hash the hash of the hash and so forth. Makes the cracking process longer for the attacker Salting is adding random or unique extra character to the password so when cracked it is not the actual PW the attacker thinks
An381038 👍 1 Selected: D
D. Salting
shady23 👍 1 Selected: D
D. Salting

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Salting is the process of adding a unique, random string of data (the salt) to an input, such as a password, before applying a one-way hash function. This ensures that even if two users have identical passwords, their resulting hashes will be completely different due to the unique salt. This technique effectively neutralizes rainbow table attacks and makes brute-force attacks significantly more difficult.

Why the Other Options Are Wrong

Key stretching (Option A) refers to techniques like PBKDF2 or bcrypt that iterate the hashing process multiple times to increase computational cost, not necessarily adding 'extra complexity' in the form of unique input data. Data masking (Option B) is used to hide sensitive data formats without altering the underlying security mechanism, often for privacy compliance. Steganography (Option C) is the practice of hiding secret data within an innocuous file or message, unrelated to hash function inputs.

Community Comment Notes

The community consensus strongly supports Salting, with most learners noting its role in preventing rainbow table attacks. As user 'lauren2wright' explained, salting ensures "same input will produce different hash values." Another user, 'MAKOhunter33333333', clarified the distinction by stating key stretching makes the cracking process longer while salting adds unique characters to the password input.

Exam Strategy

When you see keywords like 'one-way transformation', 'hash', 'rainbow table', or 'unique output', immediately think of Salting. Remember that Salting changes the input, while Key Stretching changes the processing time.

Frequently Asked Questions

What is the difference between salting and key stretching?

Salting adds random data to the input to ensure unique hashes. Key stretching iterates the hash process to increase the time required to crack it.

Why isn't steganography the correct answer here?

Steganography hides data within other files. It does not add complexity to the input of a one-way hash function like SHA-256.

More SY0-701 FAQ →

Related Analysis

Which of the following has been implemented when a host-base

S-Grade

Which of the following is a hardware-specific vulnerability?

A-Grade

An organization purchased a critical business application co

S-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide