70-210 - CHAP vs MS-CHAP?

Author

CHAP vs MS-CHAP?

jsrockford

2002-07-13, 1:51 pm

Just had a practice question regarding configuring an RRAS session. The question asks which of the following protocols should be disabled to ensure an encrypted connection:

A. PAP
B. SPAP
C. CHAP
D. MS-CHAP v.1
E. MS-CHAP v.2

I picked 'A' & 'B' but according to the testmaker 'C' should also have been chosen. Having just finished the CCNA where CHAP is considered an encrypted connection I'm a bit confused...can someone shed some light on this? Thanks!

Samba

2002-07-13, 2:15 pm

SPAP : Shiva LAN Rover Clients
Encripts only passsword
not Data

CHAP : Encrypts user name and passwords
not session Data

Hope it helps !!

Have a nice WE

Samba

2002-07-13, 2:21 pm

Also : SPAP is less secure than CHAP or
MS-CAP

CHAP uses MD5 algorithms to encript
the challeng and the users password.
it is used by most dial-up environnement

I agree with your choice !

Take care....

denis_baribeau

2002-07-13, 2:30 pm

I dont know much in this topir but decided to look abit for related link

And think the key word in the question is
"ensure an encrypted connection"

Got some info from HERE

Hope it help .If not (good reading anyway.

jsrockford

2002-07-13, 3:55 pm

Thanks folks...guess I should have paid more attention to the 'data transfer must be encrypted' line in the question. And thanks for the link!

Sponsored Links