Regarding the 802.1?authentication method, which of the following descriptions is correct? (Multiple choice)

Question

Options

• A802.1?authentication methods are divided into two types: EAP termination and EAP transparent
• BEAP transparent transmission authentication requires the NAS device to identify and parse the key
• CEAP termination authentication does not require the NAS to parse the EAP message, but directly
• DEAP transparent transmission authentication is also called EAP relay authentication

• A
  72% (28)
• B
  18% (7)
• C
  10% (4)

Explanation

802.1X defines exactly two EAP authentication modes, making A correct: EAP termination (where the NAS processes EAP messages itself and converts them to standard RADIUS) and EAP transparent transmission, which is correct to call EAP relay authentication, making D correct as well -- the NAS simply relays EAP packets between the client and the RADIUS server without interpreting them.

Option B is wrong because it inverts the behavior of transparent transmission: in relay/transparent mode, the NAS does NOT parse or handle the key exchange -- that is precisely what makes it "transparent." Option C is also wrong because it inverts the behavior of termination mode: EAP termination requires the NAS to fully parse and terminate the EAP message exchange, converting it to RADIUS attributes for the server.

Memory tip: Match the word to the action. "Termination" means the NAS terminates (stops and processes) the EAP session itself. "Transparent/Relay" means the NAS is invisible to the EAP exchange -- it just passes the messages along, like a relay runner handing off a baton without reading what is written on it.

No community discussion yet for this question.