Which of the following statements is true?
Understanding Authentication Protocols
1. CHAP:
CHAP (Challenge-Handshake Authentication Protocol) is a secure method for authenticating network connections. It protects usernames and passwords by using a challenge-response mechanism. However, it can be considered insufficient because it is vulnerable to rainbow attacks, where an attacker tries to crack hashed passwords.
2. PAP:
PAP (Password Authentication Protocol) is not considered the most secure of the authentication protocols discussed in the module. It transmits passwords in plaintext, making it vulnerable to eavesdropping attacks.
3. EAP:
EAP (Extensible Authentication Protocol) is a versatile framework commonly used in wireless networks. It supports various authentication methods, one of which includes the use of TLS (Transport Layer Security) to secure login credentials as they travel over the network.
4. RADIUS:
RADIUS (Remote Authentication Dial-In User Service) is a widely used protocol for centralized authentication, authorization, and accounting management. While it provides secure authentication, it may not be immune to all cryptographic attacks.
Considering the information provided, which of the following statements is true?
a. CHAP protects usernames and passwords, but can be considered insufficient because it is vulnerable to rainbow attacks. b. PAP is considered to be the most secure of the authentication protocols discussed in the module. c. EAP uses TLS (Transport Layer Security) to secure login credentials as they travel over the network. d. RADIUS is considered to be secure against cryptographic attacks? The correct statement is option C: EAP uses TLS (Transport Layer Security) to secure login credentials as they travel over the network. Explanation: EAP (Extensible Authentication Protocol) is an authentication framework commonly used in wireless networks. It allows for various authentication methods, one of which includes the use of TLS to ensure the security of login credentials. For example, when a user connects to a Wi-Fi network using EAP-TLS (EAP with Transport Layer Security), their login credentials are encrypted using TLS protocols, preventing unauthorized access to the information as it travels over the network.