A security analyst discovers that a company's username and password database was posted on an Internet forum. The usernames and passwords are stored in plain text. Which of the following would mitigate the damage done by this type of data exfiltration in the future?
A) Create DLP controls that prevent documents from leaving the network.
B) Implement salting and hashing.
C) Configure the web content filter to block access to the forum.
D) Increase password complexity requirements.

Question

Quizplus · Accepted Answer

Implementing salting and hashing ensures that even if the database is exfiltrated, the passwords are not stored in plain text, making it difficult for attackers to use them.

A Security Analyst Discovers That a Company's Username and Password