MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does CHAP stand for?
a. Challenge Handshake Authentication Protocol
b. Challenge Hardware Authentication Protocol
c. Circuit Hardware Authentication Protocol
d. Challenge Host Authentication Process
Answer: a. Challenge Handshake Authentication Protocolwikipedia+2
Which layer protocol does CHAP operate over most commonly?
a. Physical Layer
b. Data Link Layer
c. Network Layer
d. Application Layer
Answer: b. Data Link Layergeeksforgeeks+1
Which protocol is CHAP commonly used with for remote user authentication?
a. SMTP
b. PPP
c. TCP
d. DNS
Answer: b. PPPtechtarget+1
What key mechanism does CHAP use to authenticate a user?
a. Plaintext Password
b. Biometric Validation
c. Challenge-Response
d. One-Time Password
Answer: c. Challenge-Responsepingidentity+2
What is the main hashing algorithm used by CHAP?
a. SHA-1
b. DES
c. MD5
d. SHA-256
Answer: c. MD5ibm+3
During authentication, what does CHAP NOT transmit over the network?
a. Password
b. Username
c. Challenge Value
d. Hash Value
Answer: a. Passworddoubleoctopus+2
The first message in a CHAP handshake is sent by the:
a. Client
b. Server (Authenticator)
c. Gateway
d. Firewall
Answer: b. Server (Authenticator)mojoauth+2
What is included in the CHAP challenge message?
a. Only a username
b. Only a hash
c. A random value and an identifier
d. A public key
Answer: c. A random value and an identifieroracle+1
The hash in the CHAP response is generated using:
a. Only the password
b. Only the challenge value
c. Challenge value, identifier, and secret
d. Session key
Answer: c. Challenge value, identifier, and secretgeeksforgeeks+2
Which statement is TRUE about CHAP compared to PAP?
a. CHAP is less secure
b. CHAP uses plaintext passwords
c. CHAP provides periodic re-authentication
d. CHAP does not use hashing
Answer: c. CHAP provides periodic re-authenticationtechtarget+2
When does the authenticator send a new challenge, apart from initial login?
a. It never does
b. When the user requests it
c. At random or regular intervals
d. Only at logout
Answer: c. At random or regular intervalspingidentity+2
What is the most critical information BOTH sides must already possess for CHAP?
a. IP address
b. Shared secret
c. Port number
d. Certificate
Answer: b. Shared secretwikipedia+2
What happens if the hash values do NOT match in CHAP authentication?
a. The session continues
b. The connection is terminated
c. The password is requested
d. Nothing happens
Answer: b. The connection is terminatedwikipedia+2
Which of these is NOT a valid CHAP packet type?
a. Challenge
b. Response
c. Logout
d. Success
Answer: c. Logoutgeeksforgeeks
CHAP’s periodic challenges are primarily intended to:
a. Increase speed
b. Prevent replay attacks
c. Reduce hashing
d. Increase storage needs
Answer: b. Prevent replay attacksfrontegg+2
What is the purpose of the identifier in the CHAP challenge?
a. It is a username
b. Tracks sessions and prevents replay
c. Encrypts data
d. Stores the password
Answer: b. Tracks sessions and prevents replaysase.checkpoint+2
Which file typically holds CHAP secrets on a Unix system using PPP?
a. /etc/passwd
b. /etc/ppp/chap-secrets
c. /etc/shadow
d. /etc/hosts
Answer: b. /etc/ppp/chap-secretsoracle
What is the role of the Name field in a CHAP packet?
a. Hashing function
b. Lookup for password
c. Encrypts the challenge
d. Time stamp
Answer: b. Lookup for passwordoracle+1
Who generates the random challenge value in the initial CHAP exchange?
a. The client
b. The authenticator (server)
c. The DNS server
d. The firewall
Answer: b. The authenticator (server)pingidentity+2
Which CHAP message indicates successful authentication?
a. Response
b. Challenge
c. Success
d. Failure
Answer: c. Successfrontegg+1
What is used to generate the response hash value in CHAP?
a. Username only
b. Challenge value, identifier, shared secret
c. IP address
d. Certificate
Answer: b. Challenge value, identifier, shared secretgeeksforgeeks+1
Why can CHAP be more secure than PAP?
a. It sends passwords in cleartext
b. It never verifies user identity
c. Passwords are not sent over the link
d. It doesn’t require shared secrets
Answer: c. Passwords are not sent over the linkibm+2
What is a weakness of CHAP regarding password storage?
a. Stores only hashes
b. Needs passwords stored in cleartext on server
c. Needs no storage
d. Uses weak encryption
Answer: b. Needs passwords stored in cleartext on serverwikipedia+1
What happens after the initial CHAP handshake?
a. No further authentication
b. Periodic re-authentication
c. Biometric scan
d. Password change forced
Answer: b. Periodic re-authenticationdoubleoctopus+2
Which of the following is not part of the CHAP process?
a. Challenge
b. One-way hash function
c. Encrypted password exchange
d. Randomized identifier
Answer: c. Encrypted password exchangepingidentity+1
In CHAP, which protocol is typically negotiated before authentication begins?
a. SMTP
b. PPP Link Control Protocol (LCP)
c. DHCP
d. SSH
Answer: b. PPP Link Control Protocol (LCP)cisco+1
What does the server compare the client response to?
a. Hash computed locally
b. Password received
c. Random value
d. Session key
Answer: a. Hash computed locallymojoauth+2
What is the primary defensive purpose of CHAP’s challenge-response cycle?
a. Prevent replay attacks
b. Increase throughput
c. Expand routing tables
d. Hash data in transit
Answer: a. Prevent replay attackstechtarget+1
If periodic checks fail in CHAP, what is the result?
a. Server logs out the user
b. Access is limited
c. Connection is dropped
d. Server sends a warning
Answer: c. Connection is droppedtechtarget+1
Which protocol is the most similar to CHAP in function?
a. PAP
b. MS-CHAP
c. RADIUS
d. EAP
Answer: b. MS-CHAPwikipedia
How many steps does the CHAP handshake involve?
a. Two
b. Three
c. Four
d. Five
Answer: b. Threegeeksforgeeks+2
Which attack does the use of a random, changing identifier mitigate in CHAP?
a. Brute-force attack
b. Replay attack
c. Trojan
d. DDoS
Answer: b. Replay attacksase.checkpoint+2
In which scenario is CHAP least appropriate?
a. Internal modem dial-up
b. Remote PPP links over insecure channels
c. Situations requiring password storage as hashes only
d. Secure file transfers
Answer: c. Situations requiring password storage as hashes onlywikipedia
What value is typically NOT included in the CHAP Response packet?
a. One-way hash value
b. Identifier
c. Name of the peer
d. Session Duration
Answer: d. Session Durationgeeksforgeeks
What is necessary for both sides before a successful CHAP handshake?
a. Exchanged public keys
b. Shared secret established
c. Unique passwords generated on the fly
d. Passwords sent unencrypted
Answer: b. Shared secret establishedoracle+2
In the CHAP three-way handshake, what comes second?
a. Server sends challenge
b. Client responds with hash
c. Server verifies hash
d. Server terminates connection
Answer: b. Client responds with hashmojoauth+1
Which of these is a PRIMARY advantage of CHAP over simple password-based authentication?
a. Speed
b. Anonymity
c. Password is never sent across network
d. Uses hardware tokens
Answer: c. Password is never sent across networkibm+2
Which type of checking does CHAP perform during an active session?
a. Static
b. Periodic
c. Bi-directional
d. Simultaneous
Answer: b. Periodictechtarget+1
Which of these often serves as the CHAP authenticator in a PPP scenario?
a. DNS server
b. Network switch
c. NAS (Network Access Server)
d. File server
Answer: c. NAS (Network Access Server)techtarget+1
For which standard is CHAP specified?
a. RFC 3202
b. RFC 1994
c. RFC 1456
d. RFC 1700
Answer: b. RFC 1994wikipedia+1
What must an attacker possess to successfully fake a CHAP authentication?
a. The challenge message
b. The one-way hash algorithm
c. The shared secret
d. The identifier
Answer: c. The shared secretdoubleoctopus+1
What is a notable difference between MS-CHAP and CHAP?
a. MS-CHAP uses SHA-1
b. MS-CHAP allows mutual authentication
c. MS-CHAP is not compatible with Windows
d. MS-CHAP uses plain text
Answer: b. MS-CHAP allows mutual authenticationwikipedia
In a successful CHAP authentication, what happens after the hash values match on both sides?
a. User is denied access
b. Server sends a Success packet
c. Server reboots
d. Server sends a challenge again
Answer: b. Server sends a Success packettechtarget+1
When used in PPP, when may the authenticator send challenges besides initial authentication?
a. Never again
b. Only once per day
c. At any random or regular interval
d. Only for password reset
Answer: c. At any random or regular intervalpingidentity+2
What is the result of a CHAP handshake if the computed hash and the user’s response differ?
a. Authentication proceeds
b. Connection continues with limited privileges
c. Connection is terminated
d. User is given a grace period
Answer: c. Connection is terminatedgeeksforgeeks+1
A hash in the CHAP response packet is created using what function?
a. Symmetric encryption
b. MD5 hashing function
c. Public key signing
d. Bitwise XOR
Answer: b. MD5 hashing functionibm+2
CHAP protects against eavesdropping by never transmitting what in the clear?
a. Username
b. IP address
c. Password
d. Challenge
Answer: c. Passwordibm+1
Which two parties participate directly in a CHAP handshake?
a. Firewall and user
b. Client and authenticator
c. Router and server
d. DNS and DHCP server
Answer: b. Client and authenticatorfrontegg+2
What does the authenticator rely on to verify a CHAP response?
a. Local database of username-password pairs
b. Third-party validation
c. Biometrics
d. Key distribution center
Answer: a. Local database of username-password pairsoracle+1
Which property makes CHAP suitable for insecure links?
a. Challenge-response using hash functions
b. Single-use password storage
c. Use of symmetric encryption
d. Static session identifiers
Answer: a. Challenge-response using hash functionsdoubleoctopus+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info