Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each correct answer represents a complete solution. Choose two.

Question

Options

• AGTC
• BMS-CHAP v2
• CAES
• DRC4

• A
  95% (21)
• C
  5% (1)

Explanation

PEAP (Protected Extensible Authentication Protocol) works in two phases: it first establishes an encrypted TLS tunnel using the server's certificate, then authenticates the user inside that tunnel using an inner authentication method. GTC (Generic Token Card) and MS-CHAP v2 are the two supported inner authentication protocols - GTC handles token-based or one-time password authentication, while MS-CHAP v2 handles traditional username/password credential exchange.

AES (C) and RC4 (D) are wrong because they are symmetric encryption algorithms, not authentication protocols. They may be involved in the TLS handshake that creates the tunnel, but they have no role in authenticating the user's identity inside it.

Memory tip: Think "PEAP protects, then proves identity." The protection is the TLS tunnel (encryption); the proof is the inner method - either GTC (tokens/OTPs) or MS-CHAP v2 (passwords). If you see an encryption cipher like AES or RC4 as an option for "what PEAP uses to authenticate," eliminate it immediately - ciphers encrypt, they don't authenticate.

No community discussion yet for this question.