Exam CISSP-ISSAP topic 1 question 41 discussion

disable C. PAP (Password Authentication Protocol). PAP sends passwords in clear text format, without encryption, which makes it vulnerable to interception and unauthorized access. Disabling PAP ensures that the password is not transmitted insecurely over the network. On the other hand, several authentication protocols provide stronger security by encrypting passwords during remote access. The available options are: A. SPAP (Shiva Password Authentication Protocol): This protocol uses one-way hashing to protect passwords in transit and offers better security than PAP. B. MSCHAP (Microsoft Challenge Handshake Authentication Protocol): Introduced as an improvement over CHAP, MSCHAP encrypts passwords using reversible encryption. D. MSCHAP V2: An even more secure version of MSCHAPP that provides mutual authentication through the use of digital certificates. Therefore, disabling PAP and enabling any of the stronger authentication protocols like SPAP or MSCHAP/MSCAHPP V2 would help ensure that the password is encrypted during remote access configuration on a laptop for a dial-up connection.