SY0-501 · Question #400
A security engineer is configuring a wireless network with EAP-TLS. Which of the following activities is a requirement for this configuration?
The correct answer is D. Deploying certificates to endpoint devices. The question asks for a critical requirement when configuring EAP-TLS for a wireless network. The correct answer highlights the necessity of deploying certificates to endpoint devices for successful authentication.
Question
A security engineer is configuring a wireless network with EAP-TLS. Which of the following activities is a requirement for this configuration?
Options
- ASetting up a server
- BConfiguring federation between authentication servers
- CEnabling TOTP
- DDeploying certificates to endpoint devices
How the community answered
(54 responses)- A15% (8)
- B6% (3)
- C4% (2)
- D76% (41)
Why each option
The question asks for a critical requirement when configuring EAP-TLS for a wireless network. The correct answer highlights the necessity of deploying certificates to endpoint devices for successful authentication.
While an authentication server (like a RADIUS server) is necessary for EAP-TLS, 'setting up a server' is a general prerequisite for many network authentication schemes and not specific to the unique certificate-based requirement on the client side that defines EAP-TLS.
Configuring federation enables trust between different identity providers or domains, but it is not a fundamental requirement for the core EAP-TLS authentication mechanism on a single wireless network.
TOTP (Time-based One-Time Password) is a form of multi-factor authentication; it is distinct from and not a direct requirement for the EAP-TLS protocol, which relies on digital certificates for strong authentication.
EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) is a certificate-based authentication method that requires mutual authentication between the client and the authentication server. For this process to succeed, endpoint devices must be provisioned with trusted client certificates to present their identity to the RADIUS server.
Concept tested: EAP-TLS client certificate requirement
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-plan-eap-tls
Topics
Community Discussion
No community discussion yet for this question.