Examkin

Soru

Zorluk: KolayWireless Security Standards and Encryption Protocols

A network administrator is implementing Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) for corporate wireless client authentication. Which of the following components are required to successfully establish mutual authentication using EAP-TLS? (Select TWO)

  1. A valid digital certificate installed on the RADIUS serverCevap
  2. A valid client digital certificate installed on each endpoint deviceCevap
  3. C
    A static pre-shared key (PSK) configured on all client devices
  4. D
    A TACACS+ server configured to handle wireless supplicant credentials

Cevap

EAP-TLS mutual authentication requires both a valid server digital certificate on the RADIUS server and a valid client digital certificate on each connecting device.
EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) is a highly secure 802.1X authentication method that mandates mutual authentication. The authentication server (RADIUS) must present a valid X.509 certificate to verify its identity to the client, and the wireless endpoint device must also present a valid client certificate to verify its identity to the server.

Adım Adım Çözüm

1
Identify the authentication protocol specified in the scenario
The scenario specifies EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) for 802.1X wireless access.
EAP-TLS is an open standard defined for certificate-based 802.1X authentication.
2
Determine the certificate requirements for EAP-TLS
EAP-TLS uses PKI to establish mutual authentication, requiring certificates on both the server side (RADIUS) and client side (supplicant).
Unlike EAP-PEAP or EAP-TTLS which only require server-side certificates and use passwords for clients, EAP-TLS enforces two-way certificate validation.

Anahtar Kavram

EAP-TLS Mutual Authentication Certificate Requirements
Bu soruyu puanla

Konular

Wireless Security Standards and Encryption Protocols

Bu konudan daha fazla soru