N10-005 · Question #961
A user enters a password into a logon box on a PC. The server and the PC then compare one- way hashes to validate the password. Which of the following methods uses this process?
The correct answer is D. CHAP. CHAP (Challenge Handshake Authentication Protocol) authenticates by having the server send a challenge to the client; both sides then independently hash the challenge plus the shared secret (password) using a one-way hash function (MD5) and compare results. The actual password…
Question
A user enters a password into a logon box on a PC. The server and the PC then compare one- way hashes to validate the password. Which of the following methods uses this process?
Options
- APKI
- BKerberos
- CSingle sign-on
- DCHAP
How the community answered
(28 responses)- A4% (1)
- B7% (2)
- D89% (25)
Explanation
CHAP (Challenge Handshake Authentication Protocol) authenticates by having the server send a challenge to the client; both sides then independently hash the challenge plus the shared secret (password) using a one-way hash function (MD5) and compare results. The actual password is never sent across the network. PKI (Public Key Infrastructure) uses asymmetric key pairs and digital certificates, not simple password hashing. Kerberos uses encrypted tickets and a Key Distribution Center for authentication, not direct hash comparison on the client. Single Sign-On (SSO) is a broader access management concept, not an authentication protocol with a specific hash-comparison mechanism.
Topics
Community Discussion
No community discussion yet for this question.