Which protocol sends passwords in clear text, while the other encrypts them?

Study for the Systems Security Certified Practitioner Exam. Prepare with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

The correct choice relates to the behavior of the authentication protocols in question. The Protocol Authentication Protocol (PAP) transmits user credentials, including passwords, in plaintext. This means that if network traffic is intercepted, malicious actors can read the passwords without any additional effort. On the other hand, Challenge Handshake Authentication Protocol (CHAP) utilizes a more secure method by employing a challenge-response mechanism where the password is never sent in clear text.

This distinction is critical for understanding network security, as plaintext credentials are a significant vulnerability that can lead to unauthorized access if not adequately protected. In contrast, CHAP's use of encryption and hashing at various stages provides a layer of security that protects against the threats posed by packet sniffing.

The other options represent different types of protocols that do not relate directly to the transmission of passwords in this manner. TCP and IP are foundational networking protocols that facilitate data transmission but do not inherently deal with password protection. SSL and TLS are cryptographic protocols designed to provide secure communication; they focus on encrypting data in transit, including passwords but do not send passwords in plaintext.

Lastly, HTTP is the standard protocol for data transfer on the web, which does transmit information, including passwords, in clear text. HTTPS is the secure version

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy