A security analyst is doing a vulnerability assessment on a database server. A scanning tool returns the following information:
There have been several security breaches on the web server that accesses this database. The security team is instructed to mitigate the impact of any possible breaches. The security team is also instructed to improve the security on this database by making it less vulnerable to offline attacks. Which of the following would BEST accomplish these goals? (Choose two.)
A) Start using salts to generate MD5 password hashes
B) Generate password hashes using SHA-256
C) Force users to change passwords the next time they log on
D) Limit users to five attempted logons before they are locked out
E) Require the web server to only use TLS 1.2 encryption
Correct Answer:
Verified
Q342: Joe recently assumed the role of data
Q343: Which of the following is a major
Q344: A call center company wants to implement
Q345: A security analyst is implementing PKI-based functionality
Q346: Users are attempting to access a company's
Q348: Which of the following encryption algorithms is
Q349: A security administrator is implementing a new
Q350: A security analyst is assessing a small
Q351: Management wishes to add another authentication factor
Q352: Which of the following is a technical
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents