Examkin

Soru

Zorluk: Çok zorWireless Security and Authentication

A system administrator is upgrading an enterprise wireless network to meet a strict zero-trust compliance policy. The policy mandates full mutual authentication, requiring both the RADIUS authentication server and the connecting wireless client devices to present valid X.509 digital certificates before network access is granted. Additionally, the authentication protocol must not rely on password-based inner tunnel methods. Which Extensible Authentication Protocol (EAP) method must the administrator deploy on the network?

  1. EAP-TLSCevap
  2. B
    PEAP-MSCHAPv2
  3. C
    EAP-FAST
  4. D
    EAP-TTLS

Cevap

EAP-TLS is the required protocol because it enforces mutual authentication using client-side and server-side X.509 digital certificates.
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) provides the highest level of 802.1X wireless security by mandating mutual authentication via PKI digital certificates on both the RADIUS server and every client endpoint. It does not rely on password-based inner tunnel authentication.

Adım Adım Çözüm

1
Analyze authentication requirements specified in the security policy
Identified the need for mutual authentication where both server and client present digital certificates, explicitly avoiding password-based tunnel methods.
Enterprise wireless networks using 802.1X support various EAP types with distinct credential requirements.
2
Evaluate EAP implementation standards
EAP-TLS (Transport Layer Security) is the only standard EAP type that mandates client-side certificates alongside server-side certificates for TLS handshake authentication.
PEAP, EAP-TTLS, and EAP-FAST typically use server certificates or PACs with password-based inner authentication mechanisms.
3
Select the compliant authentication protocol
Confirm EAP-TLS as the correct selection for maximum authentication security.
EAP-TLS eliminates password-harvesting risks by using certificate-based mutual validation.

Anahtar Kavram

EAP-TLS Mutual Authentication and Wireless Security Standards
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Wireless Security and Authentication

Bu konudan daha fazla soru