SY0-501 Question #38: Real Exam Question with Answer & Explanation

Question

A company is currently using the following configuration: * IAS server with certificate-based EAP-PEAP and MSCHAP * Unencrypted authentication via PAP A security administrator needs to configure a new wireless setup with the following configurations: * PAP authentication method * PEAP and EAP provide two-factor authentication Which of the following forms of authentication are being used? (Select TWO).

Options

• APAP
• BPEAP
• CMSCHAP
• DPEAP-MSCHAP
• EEAP
• FEAP-PEAP

Explanation

This question tests understanding of authentication protocols used in the described wireless configuration, specifically identifying that the legacy IAS setup uses PAP for unencrypted authentication and MSCHAP within the EAP-PEAP tunnel.

Common mistakes.

• B. PEAP alone is not selected because the question identifies PEAP as part of a tunneling mechanism (EAP-PEAP) rather than a standalone authentication form in this specific configuration.
• D. PEAP-MSCHAP is not listed as a discrete choice that matches the described configuration; the configuration describes EAP-PEAP with MSCHAP as separate components rather than a combined PEAP-MSCHAP label.
• E. EAP alone is not the correct answer because EAP is a framework, not a specific authentication method being used independently; the configuration uses EAP-PEAP as the tunneling protocol, not bare EAP.
• F. EAP-PEAP describes the tunneling/encapsulation mechanism used to protect the inner authentication, but it is not itself a standalone authentication form - the actual authentication methods inside the tunnel are MSCHAP and PAP.

Concept tested. EAP-PEAP inner and outer authentication protocol identification

Reference. https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top

No community discussion yet for this question.