CISSP Communication and Network Security Practice Question
A network administrator is reviewing the security of the company's VPN solution. They discover that the current VPN uses PPTP. Which TWO of the following are significant security weaknesses associated with PPTP?
⚠ Common exam trap
Test-takers frequently confuse PPTP's use of MPPE with stronger encryption protocols like IPsec, or mistakenly think that MS-CHAPv2 is secure because it uses a challenge-response mechanism, overlooking its fundamental reliance on weak DES encryption and the NT hash.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It uses MS-CHAPv2 authentication which is susceptible to brute-force attacks
PPTP uses Microsoft Point-to-Point Encryption (MPPE), which relies on the RC4 stream cipher. RC4 has known weaknesses, including statistical biases and the ability to recover plaintext after encrypting a large volume of traffic, making it considered weak for modern security requirements. Additionally, PPTP's default authentication protocol is MS-CHAPv2, which is vulnerable to offline brute-force attacks because its challenge-response mechanism uses a weak DES-based hash that can be cracked with tools like Asleap or ChapCrack.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It uses MS-CHAPv2 authentication which is susceptible to brute-force attacks
Why this is correct
MS-CHAPv2 authentication is critically flawed because it uses a challenge-response mechanism that is highly susceptible to offline dictionary and brute-force attacks. The server's challenge and the client's response, which incorporates a derivative of the user's NTLM password hash, can be captured and then subjected to rapid cracking attempts. This vulnerability allows attackers to recover the user's password hash, subsequently enabling impersonation or decryption of past communications.
- ✗
It relies on IKE for key exchange
Why it's wrong here
PPTP does not utilize the Internet Key Exchange (IKE) protocol for key management. Instead, PPTP establishes its control channel over TCP port 1723 and uses the Point-to-Point Protocol (PPP) for authentication, typically with protocols like MS-CHAPv2. Key exchange for the data encryption (MPPE) is derived from these PPP authentication credentials, a method distinct from the robust, multi-phase key negotiation provided by IKE in IPsec VPNs.
- ✓
It uses MPPE encryption which is considered weak
Why this is correct
MPPE (Microsoft Point-to-Point Encryption) is considered weak because it relies on the RC4 stream cipher, which has well-documented cryptographic vulnerabilities. RC4 is known to have biases in its key stream, making it susceptible to various attacks, especially when the same key is reused or derived poorly. Furthermore, MPPE's key derivation from MS-CHAPv2 credentials and its limited key length (40, 56, or 128-bit) further diminish its security against modern cryptanalysis.
- ✗
It supports strong authentication with digital certificates
Why it's wrong here
PPTP does not inherently support strong authentication using digital certificates, such as X.509 certificates. Its primary authentication mechanisms are based on username and password, typically implemented through protocols like PAP, CHAP, or MS-CHAPv2. These methods lack the robust, cryptographically verifiable identity assurance that certificate-based authentication provides, which is a standard feature in more secure VPN protocols like IPsec or OpenVPN.
- ✗
It provides perfect forward secrecy
Why it's wrong here
PPTP does not provide perfect forward secrecy (PFS). PFS ensures that if a long-term secret key is compromised, past session keys remain secure and cannot be used to decrypt previously recorded traffic. PPTP's key derivation for MPPE encryption is often directly tied to the MS-CHAPv2 authentication credentials; therefore, a compromise of these credentials allows an attacker to decrypt all past and future communications encrypted with MPPE, negating any forward secrecy.
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
Learn chapter
Security Governance and Principles
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
VPN
A VPN (Virtual Private Network) creates a secure, encrypted tunnel between your device and a remote server, protecting your data and hiding your online activity.
About these practice questions
One of 747 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.