GPEN · Question #206
The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. Which of the followin
The correct answer is B. Dynamic key encryption C. Password hash for client authentication. LEAP is a Cisco proprietary EAP method that provides dynamic WEP key encryption and password-hash-based client authentication, but is considered weak due to known vulnerabilities.
Question
The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. Which of the following is supported by the LEAP protocol? Each correct answer represents a complete solution. Choose all that apply.
Options
- AStrongest security level
- BDynamic key encryption
- CPassword hash for client authentication
- DPublic key certificate for server authentication
How the community answered
(14 responses)- A7% (1)
- B86% (12)
- D7% (1)
Why each option
LEAP is a Cisco proprietary EAP method that provides dynamic WEP key encryption and password-hash-based client authentication, but is considered weak due to known vulnerabilities.
LEAP is known to be vulnerable to offline dictionary attacks against its MS-CHAPv2 challenge-response, making it one of the weakest EAP authentication methods available.
LEAP generates dynamic WEP keys on a per-session basis, replacing static WEP keys and providing dynamic key encryption to improve wireless confidentiality over time.
LEAP authenticates clients using MS-CHAPv2, a challenge-response mechanism that transmits a password hash rather than a plaintext credential, enabling mutual authentication between the client and access point.
LEAP does not use public key certificates for server authentication - it relies on username and password credentials exchanged via MS-CHAPv2 rather than PKI infrastructure.
Concept tested: LEAP wireless authentication protocol capabilities and limitations
Source: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1100-series/14462-leap.html
Topics
Community Discussion
No community discussion yet for this question.