Authentication Methods Supporting Mutual Authentication - CISSP-ISSAP Exam

Which Authentication Methods Support Mutual Authentication?

Question

Which of the following authentication methods support mutual authentication? Each correct answer represents a complete solution.

Choose two.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

DA.

Mutual authentication is a security process where both parties in a communication verify each other's identity. This means that not only does the client authenticate the server, but the server also authenticates the client. Mutual authentication provides a high level of security as it ensures that both parties are who they claim to be.

Out of the four authentication methods mentioned, EAP-TLS and MS-CHAP v2 support mutual authentication.

EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) is a security protocol used in wireless networks and VPN connections. It provides mutual authentication using digital certificates. During the authentication process, the client presents its digital certificate to the server, and the server presents its digital certificate to the client. The client and server verify each other's identity by verifying the digital certificates presented.

MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol version 2) is a widely used authentication protocol. It uses a mutual authentication process where the client and server both authenticate each other using a shared secret. In this process, the client sends a challenge to the server, which the server must respond to with the correct value. If the response is correct, the client and server have mutually authenticated each other.

NTLM (NT LAN Manager) and EAP-MD5 (Extensible Authentication Protocol - Message Digest 5) do not support mutual authentication. NTLM is a Windows-based authentication protocol that provides authentication of the client to the server. EAP-MD5 is an authentication method that uses a one-way hash function for encryption. It is used for authentication on wireless networks, but it does not support mutual authentication.

In conclusion, the correct answers are A. MS-CHAP v2 and D. EAP-TLS, as both of these authentication methods support mutual authentication.