nerdexam
Fortinet

NSE4 · Question #174

The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the…

The correct answer is A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2) B. PAP (Password Authentication Protocol) C. CHAP (Challenge-Handshake Authentication Protocol) D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1). FortiGate units support common RADIUS authentication protocols such as PAP, CHAP, MS-CHAP, and MS-CHAP-V2 when authenticating users against a RADIUS server.

Submitted by the_admin· Apr 18, 2026Firewall and Authentication

Question

The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the following are valid authentication protocols that can be used when a user authenticates to the RADIUS server? (Select all that apply.)

Options

  • AMS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
  • BPAP (Password Authentication Protocol)
  • CCHAP (Challenge-Handshake Authentication Protocol)
  • DMS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)
  • EFAP (FortiGate Authentication Protocol)

How the community answered

(45 responses)
  • A
    93% (42)
  • E
    7% (3)

Why each option

FortiGate units support common RADIUS authentication protocols such as PAP, CHAP, MS-CHAP, and MS-CHAP-V2 when authenticating users against a RADIUS server.

AMS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)Correct

MS-CHAP-V2 is a widely supported and more secure version of the Challenge-Handshake Authentication Protocol commonly used with RADIUS for authentication, providing mutual authentication and stronger encryption.

BPAP (Password Authentication Protocol)Correct

PAP (Password Authentication Protocol) is a basic authentication protocol supported by RADIUS, though it transmits credentials in clear text and is less secure.

CCHAP (Challenge-Handshake Authentication Protocol)Correct

CHAP (Challenge-Handshake Authentication Protocol) is a challenge-response authentication protocol supported by RADIUS, offering more security than PAP by not sending the password in clear text.

DMS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)Correct

MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1) is a Microsoft-specific challenge-response protocol used with RADIUS, providing a more secure alternative to PAP for Windows clients.

EFAP (FortiGate Authentication Protocol)

FAP (FortiGate Authentication Protocol) is not a recognized or standard authentication protocol used by RADIUS servers.

Concept tested: RADIUS authentication protocols supported

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/723466/radius

Topics

#RADIUS#Authentication Protocols#FortiGate Authentication#User Authentication

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice