Study. uk . com
  1. Home
  2. All questions
  3. Question 309

CISSP study material · question 309 of 500

A RADIUS deployment is reviewed for how it protects the exchange between the network access server and the RADIUS server. Which two properties does RFC 2865 describe? Choose two.

  1. User passwords are sent encrypted between the client and the server.
  2. The whole packet is encrypted, so no attribute is exposed in transit.
  3. Transactions are authenticated using a shared secret that is never sent over the network.
  4. The shared secret is rotated automatically on each Access-Request.
Show the answer

Answer: C. Transactions are authenticated using a shared secret that is never sent over the network.
A. User passwords are sent encrypted between the client and the server.

RFC 2865 authenticates client to server with a shared secret that is never transmitted, and encrypts user passwords between client and server so a snooper cannot read them.

Source: RFC 2865 (IETF) — RFC 2865 > 1.1 Specification of Requirements

Challenge yourself on this topic → Study as cards