GCFA · Question #118
Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disab
The correct answer is D. PAP. PAP (Password Authentication Protocol) transmits passwords in plaintext and must be disabled to ensure passwords are encrypted during remote access.
Question
Mark has been hired by a company to work as a Network Assistant. He is assigned the task to configure a dial-up connection. He is configuring a laptop. Which of the following protocols should he disable to ensure that the password is encrypted during remote access?
Options
- AMSCHAP
- BSPAP
- CMSCHAP V2
- DPAP
How the community answered
(19 responses)- A16% (3)
- B5% (1)
- C5% (1)
- D74% (14)
Why each option
PAP (Password Authentication Protocol) transmits passwords in plaintext and must be disabled to ensure passwords are encrypted during remote access.
MSCHAP uses a challenge-response mechanism with MD4 hashing, meaning the password is never sent in plaintext and disabling it would reduce security.
SPAP (Shiva PAP) uses reversible encryption for the password, which is weak but still encrypted - disabling it does not directly address plaintext transmission.
MSCHAPv2 provides mutual authentication and encrypts credentials using a challenge-response scheme, so disabling it would weaken rather than improve password protection.
PAP sends the username and password in cleartext with no encryption or hashing, making it trivially vulnerable to interception. Disabling PAP forces the connection to fall back to an authentication protocol that encrypts or hashes credentials. In a dial-up configuration, leaving PAP enabled allows an attacker on the line to capture credentials in plain text.
Concept tested: Dial-up remote access authentication protocol security
Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-authentication
Topics
Community Discussion
No community discussion yet for this question.