nerdexam
GIAC

GCFA · Question #118

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disab

The correct answer is D. PAP. PAP (Password Authentication Protocol) transmits passwords in plaintext and must be disabled to ensure passwords are encrypted during remote access.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disable to ensure that the password is encrypted during remote access?

Options

  • AMSCHAP
  • BSPAP
  • CMSCHAP V2
  • DPAP

How the community answered

(19 responses)
  • A
    16% (3)
  • B
    5% (1)
  • C
    5% (1)
  • D
    74% (14)

Why each option

PAP (Password Authentication Protocol) transmits passwords in plaintext and must be disabled to ensure passwords are encrypted during remote access.

AMSCHAP

MSCHAP uses a challenge-response mechanism with MD4 hashing, meaning the password is never sent in plaintext and disabling it would reduce security.

BSPAP

SPAP (Shiva PAP) uses reversible encryption for the password, which is weak but still encrypted - disabling it does not directly address plaintext transmission.

CMSCHAP V2

MSCHAPv2 provides mutual authentication and encrypts credentials using a challenge-response scheme, so disabling it would weaken rather than improve password protection.

DPAPCorrect

PAP sends the username and password in cleartext with no encryption or hashing, making it trivially vulnerable to interception. Disabling PAP forces the connection to fall back to an authentication protocol that encrypts or hashes credentials. In a dial-up configuration, leaving PAP enabled allows an attacker on the line to capture credentials in plain text.

Concept tested: Dial-up remote access authentication protocol security

Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-authentication

Topics

#PAP#authentication protocols#dial-up security#password encryption

Community Discussion

No community discussion yet for this question.

Full GCFA Practice