nerdexam
GIAC

GPEN · Question #206

The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. Which of the followin

The correct answer is B. Dynamic key encryption C. Password hash for client authentication. LEAP is a Cisco proprietary EAP method that provides dynamic WEP key encryption and password-hash-based client authentication, but is considered weak due to known vulnerabilities.

Penetration Testing Foundations & Reconnaissance

Question

The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. Which of the following is supported by the LEAP protocol? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AStrongest security level
  • BDynamic key encryption
  • CPassword hash for client authentication
  • DPublic key certificate for server authentication

How the community answered

(14 responses)
  • A
    7% (1)
  • B
    86% (12)
  • D
    7% (1)

Why each option

LEAP is a Cisco proprietary EAP method that provides dynamic WEP key encryption and password-hash-based client authentication, but is considered weak due to known vulnerabilities.

AStrongest security level

LEAP is known to be vulnerable to offline dictionary attacks against its MS-CHAPv2 challenge-response, making it one of the weakest EAP authentication methods available.

BDynamic key encryptionCorrect

LEAP generates dynamic WEP keys on a per-session basis, replacing static WEP keys and providing dynamic key encryption to improve wireless confidentiality over time.

CPassword hash for client authenticationCorrect

LEAP authenticates clients using MS-CHAPv2, a challenge-response mechanism that transmits a password hash rather than a plaintext credential, enabling mutual authentication between the client and access point.

DPublic key certificate for server authentication

LEAP does not use public key certificates for server authentication - it relies on username and password credentials exchanged via MS-CHAPv2 rather than PKI infrastructure.

Concept tested: LEAP wireless authentication protocol capabilities and limitations

Source: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1100-series/14462-leap.html

Topics

#LEAP protocol#wireless authentication#dynamic key encryption#password hashing

Community Discussion

No community discussion yet for this question.

Full GPEN Practice