Mark has been hired by a company to work as a Network Assistant. He is assigned the task to
configure a dial-up connection. He is configuring a laptop. Which of the following protocols should
he disable to ensure that the password is encrypted during remote access?

A.
SPAP

B.
MSCHAP

C.
PAP

D.
MSCHAP V2

Explanation:
PAP uses plain text passwords. Hence, in order to ensure that the password is
encrypted during remote access, Mark should disable PAP
while configuring the dial-up connection.
Password Authentication Protocol (PAP) is the least sophisticated authentication protocol, used
mostly when a client calls a server running an
operating system other than Windows. PAP uses plain text passwords.
Shiva Password Authentication Protocol (SPAP) is an authentication protocol used by clients to dialin to computers running Windows 2000
Server, or Shiva servers. SPAP does not support data encryption.
Challenge Handshake Authentication Protocol (CHAP) is an authentication protocol that uses a
secure form of encrypted authentication. Using
CHAP, network dial-up connections are able to securely connect to almost all PPP servers.
Microsoft created the Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) to
authenticate remote Windows workstations. It is
designed especially for Windows 95, Windows 98, Windows NT, and Windows 2000 networking
products. This protocol provides data
encryption along with password encryption.
Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) is the new version
of MS-CHAP. MS-CHAP v2 provides the
highest level of security and encryption for dial-up connection in the environment consisting of both
Windows NT and Windows 2000/XP dial-

up clients. It provides mutual authentication, stronger initial data encryption keys, and different
encryption keys for sending and receiving
data.