NSE4 · Question #174
The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the…
The correct answer is A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2) B. PAP (Password Authentication Protocol) C. CHAP (Challenge-Handshake Authentication Protocol) D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1). FortiGate units support common RADIUS authentication protocols such as PAP, CHAP, MS-CHAP, and MS-CHAP-V2 when authenticating users against a RADIUS server.
Question
The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the following are valid authentication protocols that can be used when a user authenticates to the RADIUS server? (Select all that apply.)
Options
- AMS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
- BPAP (Password Authentication Protocol)
- CCHAP (Challenge-Handshake Authentication Protocol)
- DMS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)
- EFAP (FortiGate Authentication Protocol)
How the community answered
(45 responses)- A93% (42)
- E7% (3)
Why each option
FortiGate units support common RADIUS authentication protocols such as PAP, CHAP, MS-CHAP, and MS-CHAP-V2 when authenticating users against a RADIUS server.
MS-CHAP-V2 is a widely supported and more secure version of the Challenge-Handshake Authentication Protocol commonly used with RADIUS for authentication, providing mutual authentication and stronger encryption.
PAP (Password Authentication Protocol) is a basic authentication protocol supported by RADIUS, though it transmits credentials in clear text and is less secure.
CHAP (Challenge-Handshake Authentication Protocol) is a challenge-response authentication protocol supported by RADIUS, offering more security than PAP by not sending the password in clear text.
MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1) is a Microsoft-specific challenge-response protocol used with RADIUS, providing a more secure alternative to PAP for Windows clients.
FAP (FortiGate Authentication Protocol) is not a recognized or standard authentication protocol used by RADIUS servers.
Concept tested: RADIUS authentication protocols supported
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/723466/radius
Topics
Community Discussion
No community discussion yet for this question.