MENU
Given: ABC Corporation is evaluating the security solution for their existing WLAN. Two of their supported solutions include a PPTP VPN and 802.1X/LEAP. They have used PPTP VPNs because of their wide support in server and desktop operating systems. While both PPTP and LEAP adhere to the minimum requirements of the corporate security policy, some individuals have raised concerns about MS-CHAPv2 (and similar) authentication and the known fact that MS-CHAPv2 has proven vulnerable in improper implementations.
As a consultant, what do you tell ABC Corporation about implementing MS-CHAPv2 authentication? (Choose 2)
Suggested Answer: B, D
Get Premium CWSP-208 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
24 comments · newest first
KR
Kris
10 months ago
MS-CHAPv2 isn't compliant with WPA2-Enterprise, just a heads up!
LO
Louis
10 months ago
Using it inside a TLS tunnel could help, but still risky.
CH
Chanel
10 months ago
Totally agree, it's not the best choice for security.
PA
Paulina
10 months ago
MS-CHAPv2 is definitely vulnerable to offline dictionary attacks.
FE
Felice
11 months ago
Wait, does anyone really think MS-CHAPv2 is secure?
ME
Melodie
11 months ago
I vaguely recall that using MS-CHAPv2 inside a TLS-encrypted tunnel could make it more secure, but I’m not confident about that.
BE
Belen
11 months ago
I practiced a question about LEAP and WEP, and I think it mentioned that LEAP's security relies heavily on WEP, which isn't great.
ST
Stevie
11 months ago
I’m not entirely sure, but I think MS-CHAPv2 is compliant with WPA-Personal but not WPA2-Enterprise. That seems important for their WLAN.
DO
Dottie
11 months ago
I remember reading that MS-CHAPv2 can be vulnerable to offline dictionary attacks, so I think that's a concern we should address.
GL
Glen
12 months ago
The key here is that MS-CHAPv2 has known vulnerabilities, even if it meets the minimum security requirements. I'd recommend using a more secure authentication method if possible.
RO
Rodrigo
12 months ago
Wait, I thought MS-CHAPv2 was compliant with WPA2-Enterprise. I'm not sure about the WPA-Personal part. I'll have to double-check that.
HY
Hyun
12 months ago
Okay, I remember learning that MS-CHAPv2 should only be used within a TLS-encrypted tunnel for WLAN security. That seems like the most secure approach.
CH
Charlene
1 year ago
Hmm, I'm a bit confused about the LEAP part. I know LEAP uses MS-CHAPv2, but I'm not sure if it's only secure with WEP. I'll have to think about that one.
CE
Celeste
1 year ago
I'm pretty confident about this one. MS-CHAPv2 is definitely vulnerable to offline dictionary attacks, so that's an easy choice.
BE
Ben
1 year ago
F) When implemented with AES-CCMP encryption, MS-CHAPv2 is very secure. Sounds like a plan to me, as long as we don't forget to throw in some pixie dust and unicorn tears for good measure.
VA
Val
1 year ago
I can't believe they're still using PPTP VPNs. That's like using a cardboard box to protect your valuables!
JO
Jovita
1 year ago
D) MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel. This helps mitigate the security risks associated with MS-CHAPv2.
HU
Hubert
1 year ago
B) MS-CHAPv2 is subject to offline dictionary attacks. This is a well-known vulnerability that makes it a poor choice for secure authentication.
LA
Lashawn
1 year ago
D) MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
AL
Aleisha
1 year ago
B) MS-CHAPv2 is subject to offline dictionary attacks.
AU
Audra
1 year ago
A) MS-CHAPv2 is compliant with WPA-Personal, but not WPA2-Enterprise.
JO
Joesph
1 year ago
I'm not sure about option E, MS-CHAPv2 uses AES authentication, and is therefore secure. Can someone explain this further?
TO
Torie
1 year ago
I agree with Samira, but we should also consider option D, MS-CHAPv2 is only appropriate for WLAN security when used inside a TLS-encrypted tunnel.
SA
Samira
1 year ago
I think we should go with option B, MS-CHAPv2 is subject to offline dictionary attacks.