nerdexam
GIAC

GSLC · Question #88

You work as a Network Administrator for McNeil Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest…

The correct answer is D. The wireless network communication will be secured. WEP secures the wireless channel satisfying the first task, but PEAP-MS-CHAP v2 authenticates users via username and password - not smart cards - so the smart card requirement is not met.

Security Architecture & Engineering

Question

You work as a Network Administrator for McNeil Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest domain-based network. The company's management has decided to provide laptops to its sales team members. These laptops are equipped with smart card readers. The laptops will be configured as wireless network clients. You are required to accomplish the following tasks:

  • The wireless network communication should be secured.
  • The laptop users should be able to use smart cards for getting

authenticated. In order to accomplish the tasks, you take the following steps:

  • Configure 802.1x and WEP for the wireless connections.
  • Configure the PEAP-MS-CHAP v2 protocol for authentication

What will happen after you have taken these steps?

Options

  • AThe laptop users will be able to use smart cards for getting authenticated.
  • BNone of the tasks will be accomplished.
  • CBoth tasks will be accomplished.
  • DThe wireless network communication will be secured.

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    15% (5)
  • C
    3% (1)
  • D
    76% (26)

Why each option

WEP secures the wireless channel satisfying the first task, but PEAP-MS-CHAP v2 authenticates users via username and password - not smart cards - so the smart card requirement is not met.

AThe laptop users will be able to use smart cards for getting authenticated.

PEAP-MS-CHAP v2 is a username and password-based authentication protocol and cannot use smart card certificates; EAP-TLS is the correct protocol for certificate and smart card-based authentication.

BNone of the tasks will be accomplished.

WEP does provide wireless encryption so the first task of securing wireless communication is accomplished, making it incorrect to say no tasks are completed.

CBoth tasks will be accomplished.

Both tasks are not accomplished because PEAP-MS-CHAP v2 lacks smart card support, leaving the second requirement unmet.

DThe wireless network communication will be secured.Correct

WEP encrypts wireless communication over the air, fulfilling the requirement to secure wireless network communication. However, PEAP-MS-CHAP v2 uses challenge-response password authentication and does not support smart card certificates; smart card authentication requires EAP-TLS, which uses certificate-based mutual authentication. Because only the wireless encryption task is fulfilled and smart card authentication is not, only option D accurately describes the outcome.

Concept tested: EAP authentication protocol selection for smart card support

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top

Topics

#smart card authentication#wireless security#EAP-TLS#PEAP

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSLC Practice