While working on a new project a security administrator wants to verify the integrity of the data in
the organizations archive library. Which of the following is the MOST secure combination to
implement to meet this goal? (Select TWO)
A.
Hash with SHA
B.
Encrypt with Diffie-Hellman
C.
Hash with MD5
D.
Hash with RIPEMD
E.
Encrypt with AES
Isn’t SHA better than MD5?
SHA > MD5. This should be A and D.
SHA-1 is better than MD5 (160bits as opposed to 128bits), however, the US government is not using it any more and it is dis-recommended. SHA-2 should be used instead. Without SHA-1 as an option, the only two alternatives are MD5 and RIPEMD
Hate this question. There are a couple of ways to look at this. They are asking to check the integrity of archive libraries–you need to know what hash was used when the file was created to check on it now. My first thought was the two oldest.
But it also says the most secure combination. That has to be A&D even though they are not something that would be combined.
A and D , SHA-1 or later is better than MD5. Most secure etc.
Maybe the key wording here is “combination” of hashing techniques, which is RIPEMD which has use of MD5, too.