Authentication Protocols Questions and Answers

Q: Which hash algorithm is used by Windows (pre-Windows 10) to store user password hashes ?

Windows stores user password hashes as the NT hash.The Security Account Manager (SAM) database stores local account passwords as NT hashes (often called NTLM hashes): the MD4 digest of the password in UTF-16 little-endian, with no salt. Older systems also stored the weaker LM hash, which is now disabled by default. Because the NT hash is unsalted and fast to compute, extracted SAM hashes can be cracked or used directly in pass-the-hash attacks, which makes them a frequent forensic and security topic.SHA-1 is not the SAM's password hash, and bcrypt and PBKDF2 are slow, salted password-hashing schemes that the SAM does not use for account passwords.

Q: What is the primary purpose of Multi-Factor Authentication (MFA) ?

MFA's primary purpose is to verify the identity of a user through multiple methods.Multi-factor authentication requires two or more independent proofs of identity: something you know (a password), something you have (a phone or token) and something you are (a fingerprint). A stolen password alone is then not enough.It does not create stronger passwords, it has nothing to do with preventing encryption, and it is not meant to improve network performance.

Which hash algorithm is used by Windows (pre-Windows 10) to store user password hashes ?

A.SHA-1
B.NT Hash
C.bcrypt
D.PBKDF2

Exam Year(s)

Tripura Public Service Commission - 2026,

Answer: B

Windows stores user password hashes as the NT hash.

The Security Account Manager (SAM) database stores local account passwords as NT hashes (often called NTLM hashes): the MD4 digest of the password in UTF-16 little-endian, with no salt. Older systems also stored the weaker LM hash, which is now disabled by default. Because the NT hash is unsalted and fast to compute, extracted SAM hashes can be cracked or used directly in pass-the-hash attacks, which makes them a frequent forensic and security topic.

SHA-1 is not the SAM's password hash, and bcrypt and PBKDF2 are slow, salted password-hashing schemes that the SAM does not use for account passwords.

Discuss in Forum

What is the primary purpose of Multi-Factor Authentication (MFA) ?

A.To create stronger passwords
B.To prevent data encryption
C.To verify the identity of a user through multiple methods
D.To improve network performance

Exam Year(s)

Tripura Public Service Commission - 2025,

Answer: C

MFA's primary purpose is to verify the identity of a user through multiple methods.

Multi-factor authentication requires two or more independent proofs of identity: something you know (a password), something you have (a phone or token) and something you are (a fingerprint). A stolen password alone is then not enough.

It does not create stronger passwords, it has nothing to do with preventing encryption, and it is not meant to improve network performance.

Discuss in Forum

Loading…

Topics

Other Subjects

Tags: Authentication Protocols Questions and Answers || Authentication Protocols MCQ Questions and Answers || Authentication Protocols GK Questions and Answers || Authentication Protocols GK MCQ Questions || Authentication Protocols Multiple Choice Questions and Answers || Authentication Protocols GK || GK on Authentication Protocols || Cyber Security Questions and Answers || Cyber Security MCQ Questions and Answers || Cyber Security GK Questions and Answers || GK on Cyber Security

Authentication Protocols Questions and Answers

Topics

Other Subjects

About Us

Stay informed about all important Dates & Notifications