Examkin

Question

Difficulty: Very hardWireless Security and Authentication

A system administrator is upgrading an enterprise wireless network to meet a strict zero-trust compliance policy. The policy mandates full mutual authentication, requiring both the RADIUS authentication server and the connecting wireless client devices to present valid X.509 digital certificates before network access is granted. Additionally, the authentication protocol must not rely on password-based inner tunnel methods. Which Extensible Authentication Protocol (EAP) method must the administrator deploy on the network?

  1. EAP-TLSAnswer
  2. B
    PEAP-MSCHAPv2
  3. C
    EAP-FAST
  4. D
    EAP-TTLS

Answer

EAP-TLS is the required protocol because it enforces mutual authentication using client-side and server-side X.509 digital certificates.
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) provides the highest level of 802.1X wireless security by mandating mutual authentication via PKI digital certificates on both the RADIUS server and every client endpoint. It does not rely on password-based inner tunnel authentication.

Step-by-Step Solution

1
Analyze authentication requirements specified in the security policy
Identified the need for mutual authentication where both server and client present digital certificates, explicitly avoiding password-based tunnel methods.
Enterprise wireless networks using 802.1X support various EAP types with distinct credential requirements.
2
Evaluate EAP implementation standards
EAP-TLS (Transport Layer Security) is the only standard EAP type that mandates client-side certificates alongside server-side certificates for TLS handshake authentication.
PEAP, EAP-TTLS, and EAP-FAST typically use server certificates or PACs with password-based inner authentication mechanisms.
3
Select the compliant authentication protocol
Confirm EAP-TLS as the correct selection for maximum authentication security.
EAP-TLS eliminates password-harvesting risks by using certificate-based mutual validation.

Key Concept

EAP-TLS Mutual Authentication and Wireless Security Standards
Estimated Time:1m 30s
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic