HP0-Y43 · Question #35
What is true about using EAP-Transport Layer Security (EAP-TLS) in the 802.1X process?
The correct answer is B. Supplicants are required to authenticate using digital certificates. The EAP server will then respond with an EAP-Request packet with EAP-Type=EAP-TLS. The data field of this packet will encapsulate one or more TLS records. These will contain a TLS server_hello handshake message, possibly followed by TLS certificate, server_key_exchange…
Question
What is true about using EAP-Transport Layer Security (EAP-TLS) in the 802.1X process?
Options
- ASupplicants use a non-reversible hash to submit all login credentials.
- BSupplicants are required to authenticate using digital certificates.
- CEAP-TLS provides a flexible security framework, which can be customized for each environment.
- DSupplicant and application server are required to mutually authenticate with a username and password,
How the community answered
(26 responses)- A8% (2)
- B73% (19)
- C15% (4)
- D4% (1)
Explanation
The EAP server will then respond with an EAP-Request packet with EAP-Type=EAP-TLS. The data field of this packet will encapsulate one or more TLS records. These will contain a TLS server_hello handshake message, possibly followed by TLS certificate, server_key_exchange, certificate_request, server_hello_done and/or finished handshake messages, and/or a TLS change_cipher_spec message. The server_hello handshake message contains a TLS version number, another random number, a sessionId, and a ciphersuite. The version offered by the server MUST correspond to TLS v1.0 or later.
Topics
Community Discussion
No community discussion yet for this question.