The employees of CCN Inc. require remote access to the company's proxy servers. In order to provide solid wireless security, the company uses LEAP as the authentication protocol. Which of the followin

LEAP does not use public key certificates for server authentication - certificate-based mutual authentication is a defining feature of EAP-TLS, a distinct and more secure protocol.

LEAP uses an MS-CHAPv2-based challenge-response mechanism where the client authenticates by sending a hashed password response rather than the plaintext credential, preventing direct exposure of the password over the wireless link. This password hash authentication is a defining characteristic of how LEAP handles client-side identity verification.

LEAP is not considered the strongest security level - it is vulnerable to offline dictionary attacks against the MS-CHAPv2 hash as demonstrated by the ASLEAP attack tool, and Cisco itself has recommended migrating to PEAP or EAP-TLS.

Upon successful LEAP authentication, the protocol dynamically derives per-session WEP encryption keys from the authentication exchange, meaning each session uses a unique key rather than the static WEP keys that were easily cracked in earlier deployments.