SY0-301 · Question #159
Which of the following would satisfy wireless network implementation requirements to use mutual authentication and usernames and passwords?
The correct answer is C. PEAP-MSCHAPv2. PEAP-MSCHAPv2 satisfies both requirements simultaneously. It provides mutual authentication - the server authenticates itself to the client using a digital certificate, and the client authenticates to the server using MSCHAPv2, which carries username and password credentials…
Question
Which of the following would satisfy wireless network implementation requirements to use mutual authentication and usernames and passwords?
Options
- AEAP-MD5
- BWEP
- CPEAP-MSCHAPv2
- DEAP-TLS
How the community answered
(38 responses)- A16% (6)
- B5% (2)
- C74% (28)
- D5% (2)
Explanation
PEAP-MSCHAPv2 satisfies both requirements simultaneously. It provides mutual authentication - the server authenticates itself to the client using a digital certificate, and the client authenticates to the server using MSCHAPv2, which carries username and password credentials - all within a protected TLS tunnel. EAP-MD5 (A) uses usernames and passwords but does NOT provide mutual authentication (the server is not authenticated to the client), making it vulnerable to man-in-the-middle attacks. WEP (B) is a deprecated encryption scheme with no proper user authentication mechanism. EAP-TLS (D) provides strong mutual authentication but uses client-side digital certificates rather than usernames and passwords, so it does not satisfy the username/password requirement.
Topics
Community Discussion
No community discussion yet for this question.