A company is currently using the following configuration: IAS server with certificate-based EAP-PEAP and MSCHAP Unencrypted authentication via PAP A security administrator needs to configure a new…

PAP (Password Authentication Protocol) is explicitly stated as the unencrypted authentication method in use by the IAS server configuration, making it one of the active authentication forms being used in the described environment.

PEAP alone is not selected because the question identifies PEAP as part of a tunneling mechanism (EAP-PEAP) rather than a standalone authentication form in this specific configuration.

MSCHAP is the inner authentication protocol used within the EAP-PEAP tunnel in the IAS server configuration (EAP-PEAP with MSCHAP), meaning it is the underlying credential validation method that authenticates the user's identity inside the encrypted PEAP tunnel.

PEAP-MSCHAP is not listed as a discrete choice that matches the described configuration; the configuration describes EAP-PEAP with MSCHAP as separate components rather than a combined PEAP-MSCHAP label.

EAP alone is not the correct answer because EAP is a framework, not a specific authentication method being used independently; the configuration uses EAP-PEAP as the tunneling protocol, not bare EAP.

EAP-PEAP describes the tunneling/encapsulation mechanism used to protect the inner authentication, but it is not itself a standalone authentication form - the actual authentication methods inside the tunnel are MSCHAP and PAP.