Which of the following statements are true about MS-CHAPv2?

The correct answer is B. It provides an authenticator-controlled password change mechanism. C. It is subject to offline dictionary attacks. D. It can be replaced with EAP-TLS as the authentication mechanism for PPTP. MS-CHAPv2 provides mutual authentication between peers by piggybacking a peer challenge on the Response packet and an authenticator response on the Success packet. MS-CHAPv2 has various features such as: It is enabled by negotiating CHAP Algorithm 0x80 (0x81 for MS- CHAPv2) in…

Network & Perimeter Auditing

Question

Options

AIt is a connectionless protocol.
BIt provides an authenticator-controlled password change mechanism.
CIt is subject to offline dictionary attacks.
DIt can be replaced with EAP-TLS as the authentication mechanism for PPTP.

How the community answered

(22 responses)

A
14% (3)
B
86% (19)

Explanation

MS-CHAPv2 provides mutual authentication between peers by piggybacking a peer challenge on the Response packet and an authenticator response on the Success packet. MS-CHAPv2 has various features such as: It is enabled by negotiating CHAP Algorithm 0x80 (0x81 for MS- CHAPv2) in LCP option 3, Authentication Protocol. It provides an authenticator-controlled password change mechanism. It provides an authenticator-controlled authentication retry mechanism. It defines failure codes returned in the Failure packet message field. With weak passwords, MS-CHAPv2 is subject to offline dictionary attacks; hence, it can be replaced with EAP-TLS as the authentication mechanism for PPTP.

Topics

#MS-CHAPv2#PPTP authentication#EAP-TLS#dictionary attacks

Community Discussion

No community discussion yet for this question.

Full GSNA Practice