Question

A development team at Contoso needs to store user passwords in a database. Security requires that even database administrators cannot reverse the stored values back to the original passwords, but the system must still be able to verify a password a user enters at sign-in. Which technique should the team apply to the stored password values?

Accepted Answer

Hashing the passwords before storing them

Answer

Symmetric encryption using a shared key stored in the application

Answer

Asymmetric encryption using a public/private key pair

Answer

Encoding the passwords with Base64 before storing them