nerdexam
GIAC

GSLC · Question #501

Which of the following security protocols can be used to support MS-CHAPv2 for wireless client authentication? Each correct answer represents a complete solution. Choose two.

The correct answer is B. PEAP D. PPTP. MS-CHAPv2 requires a tunneling or encapsulating protocol to carry it securely; both PEAP and PPTP provide that capability for wireless and VPN authentication respectively.

Security Architecture & Engineering

Question

Which of the following security protocols can be used to support MS-CHAPv2 for wireless client authentication? Each correct answer represents a complete solution. Choose two.

Options

  • AHTTP
  • BPEAP
  • CIPSec
  • DPPTP

How the community answered

(55 responses)
  • A
    9% (5)
  • B
    87% (48)
  • C
    4% (2)

Why each option

MS-CHAPv2 requires a tunneling or encapsulating protocol to carry it securely; both PEAP and PPTP provide that capability for wireless and VPN authentication respectively.

AHTTP

HTTP is a web transfer protocol and has no mechanism to carry or encapsulate MS-CHAPv2 authentication exchanges.

BPEAPCorrect

PEAP (Protected Extensible Authentication Protocol) creates a TLS-encrypted tunnel over which MS-CHAPv2 is used as the inner authentication method, making it a standard 802.1X wireless authentication choice.

CIPSec

IPsec authenticates using certificates or pre-shared keys via IKE and does not natively support MS-CHAPv2.

DPPTPCorrect

PPTP (Point-to-Point Tunneling Protocol) natively uses MS-CHAPv2 for user authentication and directly supports MS-CHAPv2 credentials as part of its design.

Concept tested: Protocols tunneling MS-CHAPv2 for wireless authentication

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top

Topics

#MS-CHAPv2#PEAP#PPTP#wireless authentication

Community Discussion

No community discussion yet for this question.

Full GSLC Practice