GSLC-2020: GIAC Security LeadershipDemo

By GIAC · Question Mode

QuestionQ86

Cryptography Concepts for Managers

Which of the following statements are true about MS-CHAPv2?

Each correct answer represents a complete solution. Choose all that apply.

Choose three
  • A It can be replaced with EAP-TLS as the authentication mechanism for PPTP.
  • B It provides an authenticator-controlled password change mechanism.
  • C It is subject to offline dictionary attacks.
  • D It is a connectionless protocol.
Explanation

PPTP supports EAP-based authentication, including EAP-TLS, as an alternative to password-based MS-CHAPv2. MS-CHAPv2 also defines an authenticator-directed password-change flow: the authenticator reports an expired-password failure and the peer sends a Change-Password packet. Because the challenge/response is derived from a password, captured exchanges can be tested against password guesses offline. The protocol is a stateful, ordered challenge-response exchange rather than a connectionless protocol.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!