nerdexam
CompTIA

SY0-501 · Question #400

A security engineer is configuring a wireless network with EAP-TLS. Which of the following activities is a requirement for this configuration?

The correct answer is D. Deploying certificates to endpoint devices. The question asks for a critical requirement when configuring EAP-TLS for a wireless network. The correct answer highlights the necessity of deploying certificates to endpoint devices for successful authentication.

Submitted by zhang_li· Mar 4, 2026Security architecture

Question

A security engineer is configuring a wireless network with EAP-TLS. Which of the following activities is a requirement for this configuration?

Options

  • ASetting up a server
  • BConfiguring federation between authentication servers
  • CEnabling TOTP
  • DDeploying certificates to endpoint devices

How the community answered

(54 responses)
  • A
    15% (8)
  • B
    6% (3)
  • C
    4% (2)
  • D
    76% (41)

Why each option

The question asks for a critical requirement when configuring EAP-TLS for a wireless network. The correct answer highlights the necessity of deploying certificates to endpoint devices for successful authentication.

ASetting up a server

While an authentication server (like a RADIUS server) is necessary for EAP-TLS, 'setting up a server' is a general prerequisite for many network authentication schemes and not specific to the unique certificate-based requirement on the client side that defines EAP-TLS.

BConfiguring federation between authentication servers

Configuring federation enables trust between different identity providers or domains, but it is not a fundamental requirement for the core EAP-TLS authentication mechanism on a single wireless network.

CEnabling TOTP

TOTP (Time-based One-Time Password) is a form of multi-factor authentication; it is distinct from and not a direct requirement for the EAP-TLS protocol, which relies on digital certificates for strong authentication.

DDeploying certificates to endpoint devicesCorrect

EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) is a certificate-based authentication method that requires mutual authentication between the client and the authentication server. For this process to succeed, endpoint devices must be provisioned with trusted client certificates to present their identity to the RADIUS server.

Concept tested: EAP-TLS client certificate requirement

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-plan-eap-tls

Topics

#EAP-TLS#wireless security#certificate deployment#802.1X

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice