300-370 · Question #79
Which two EAP types are tunneled? (Choose two.)
The correct answer is B. EAP-MSCHAPv2 D. EAP-FAST. Tunneled EAP methods establish a secure cryptographic tunnel to protect inner authentication exchanges from eavesdropping and man-in-the-middle attacks. EAP-FAST is a standalone tunneled EAP method, while EAP-MSCHAPv2 is commonly used as an inner method within other EAP tunnels.
Question
Which two EAP types are tunneled? (Choose two.)
Options
- AEAP-MD5
- BEAP-MSCHAPv2
- CPAP
- DEAP-FAST
- EEAP-MD6
How the community answered
(65 responses)- A6% (4)
- B89% (58)
- C3% (2)
- E2% (1)
Why each option
Tunneled EAP methods establish a secure cryptographic tunnel to protect inner authentication exchanges from eavesdropping and man-in-the-middle attacks. EAP-FAST is a standalone tunneled EAP method, while EAP-MSCHAPv2 is commonly used as an inner method within other EAP tunnels.
EAP-MD5 is an older, non-tunneled EAP method that transmits credentials in plain text or a weak hash, making it vulnerable to eavesdropping and replay attacks.
EAP-MSCHAPv2 (Microsoft Challenge-Handshake Authentication Protocol version 2) is a common inner EAP method that is frequently run inside a secure tunnel provided by outer EAP methods like PEAP (Protected Extensible Authentication Protocol) or EAP-TTLS (Tunneled Transport Layer Security). The outer tunnel protects the EAP-MSCHAPv2 exchange from exposure.
PAP (Password Authentication Protocol) is a legacy authentication protocol that transmits credentials in cleartext and is not an EAP type, although it can be encapsulated within EAP tunnels.
EAP-FAST (Flexible Authentication via Secure Tunneling) is a robust tunneled EAP method developed by Cisco that establishes a secure TLS tunnel for authentication without requiring server-side certificates. It uses PACs (Protected Access Credentials) for mutual authentication and session key generation within the tunnel.
EAP-MD6 is not a recognized or standard EAP type.
Concept tested: EAP tunneling methods and types
Source: https://www.cisco.com/c/en/us/td/docs/wireless/wlc/7-4/configuration/guide/b_cg74/b_cg74_chapter_01001.html
Topics
Community Discussion
No community discussion yet for this question.