GIAC
GAWN · Question #51
An auditor sees that clients accept any server certificate during PEAP. Which mitigation is BEST?
The correct answer is B. Enforce certificate validation, pin expected server identity, and use proper MDM profiles. You've hit your limit · resets 1pm (America/New_York)
Wireless Network Auditing and Defense
Question
An auditor sees that clients accept any server certificate during PEAP. Which mitigation is BEST?
Options
- AUse shorter PSKs
- BEnforce certificate validation, pin expected server identity, and use proper MDM profiles
- CEnable SSID hiding
- DUse channel 13
How the community answered
(29 responses)- A21% (6)
- B69% (20)
- C3% (1)
- D7% (2)
Explanation
You've hit your limit · resets 1pm (America/New_York)
Topics
#PEAP#certificate validation#EAP security#MDM profiles
Community Discussion
No community discussion yet for this question.