Security Architecture and Engineering
Question #246
When designing a new user authentication system, which of the following represents the industry best practice for storing user passwords?
A. Hash and salt passwords.
B. Encrypt passwords with 256-bit encryption keys.
C. Mandate rules for password complexity.
D. Tokenize passwords.
Domain Concept: Security Architecture and Engineering
This scenario evaluates management-level decision making in Security Architecture and Engineering. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.