Which defining operational characteristic correctly corresponds to each authentication protocol or Extensible Authentication Protocol (EAP) framework variant?
- EAP-TLSRequires PKI digital certificates installed on both the authentication server and client devices for mutual authentication.
- EAP-FASTUtilizes a Protected Access Credential (PAC) dynamically provisioned to clients to establish a secure tunnel without client certificates.
- PEAPCreates an encrypted TLS tunnel using only a server-side certificate to protect inner password-based authentication methods.
- TACACS+Operates over TCP port 49, encrypting the full packet payload while decoupling authentication, authorization, and accounting functions.
Answer
EAP-TLS matches requiring dual digital certificates (server and client); EAP-FAST matches using Protected Access Credentials (PACs); PEAP matches creating a TLS tunnel using a server-side certificate; TACACS+ matches encrypting the full payload and separating AAA over TCP port 49.
Each protocol is matched to its unique operational mechanism: EAP-TLS mandates dual-sided PKI certificates for server and client; EAP-FAST utilizes Protected Access Credentials (PACs) instead of client certificates; PEAP leverages a server-side certificate to build a TLS tunnel for inner credential authentication; TACACS+ provides full payload encryption and separate AAA services over TCP port 49.
Step-by-Step Solution
Key Concept
Authentication Protocols and EAP Framework Differentiation