Cisco Certified Network Associate (CCNA) Practice Exam

In PPP, what is the standard method of authenticating a device using hashed passwords?

1. Challenge Handshake Authentication Protocol (CHAP)

2. Password Authentication Protocol (PAP)

3. Simple Authentication and Security Layer (SASL)

4. Secure Remote Password (SRP)

The correct answer is: Challenge Handshake Authentication Protocol (CHAP)

In Point-to-Point Protocol (PPP), the standard method for authenticating a device using hashed passwords is the Challenge Handshake Authentication Protocol (CHAP). CHAP enhances security through hashing, allowing it to protect the password from being sent over the network in clear text. During the authentication process, the server sends a challenge to the client, which then computes a hash value based on its password and the received challenge. This hash is sent back to the server for verification, ensuring that the password is never transmitted directly and remains secure. This method is more secure than Password Authentication Protocol (PAP), which sends the password in clear text, making it vulnerable to interception. The other options provided, such as Simple Authentication and Security Layer (SASL) and Secure Remote Password (SRP), are not standard methods within the PPP framework specifically for hashed password authentication. Therefore, CHAP is recognized as the most widely used and effective method within PPP for this purpose.