Exam 312-38 topic 1 question 277 discussion

Answer: DH-CHAP (Diffie-Hellman Challenge Handshake Authentication Protocol) is a password-based authentication protocol with key exchange. It combines: CHAP (Challenge Handshake Authentication Protocol) for challenge-based authentication. Diffie-Hellman (DH) for secure cryptographic key exchange. This protocol is commonly used in SAN (Storage Area Network) storage environments, such as Fibre Channel, to ensure mutual authentication between devices before allowing communication. Analysis of the other options: A. PPP (Point-to-Point Protocol): tunneling protocol that supports authentication, but is not itself a password-based authentication protocol. B. CHAP: is a password-based authentication protocol, but does not involve key exchange. C. VRRP (Virtual Router Redundancy Protocol): is used for high availability of routers, has nothing to do with authentication.

DH in DH-CHAP means "Difffe-Hellman" - thus implying a key exchange. CHAP relies on a previously shared secret. SO in this case, its DH-CHAP.

It's a tricky question for me, DH-CHAP is the same as CHAP but applied to fiber switches: http://www.sansecurity.com/faq/dh-chap.shtml I think that the question should be multi selection, both are mandatory password-based and key-exchange authentication protocols

Bella, a security professional working at an IT firm, finds that a security breach has occurred while transferring important files. Sensitive data, employee usernames, and passwords are shared in plaintext, paving the way for hackers to perform successful session hijacking. To address this situation, Bella implemented a protocol that sends data using encryption and digital certificates. Which of the following protocols is used by Bella?

DHCHAP is a mandatory password-based, key-exchange authentication protocol that supports both switch-to-switch and host-to-switch authentication https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwizk6Hqhc39AhWUScAKHdS6D6MQFnoECA4QAw&url=https%3A%2F%2Fwww.cisco.com%2Fen%2FUS%2Fdocs%2Fstorage%2Fsan_switches%2Fmds9000%2Fsw%2Frel_2_x%2Fsan-os%2Fconfiguration%2Fguide%2Ffcspdh.pdf&usg=AOvVaw2zVMGzZqRkjeu_hsVzy8j9

answer is CHAP.

chatGPT says its CHAP .. why is DH-CHAP selected