Which of the following authentication protocols sends a user certificate inside an encrypted tunnel?
A.
PEAP
B.
EAP-TLS
C.
WEP
D.
EAP-FAST
Explanation:
The EAP-TLS authentication protocol uses a certificate on both the authentication
server and the user. EAP-TLS first generates client and
server key pairs, and then the keys are signed by a CA (Certificate Authority) server. EAP-TLS sends a
user certificate inside an encrypted
tunnel.
Answer option D is incorrect. No certificate is required while a user uses the EAP-FAST
authentication protocol. EAP-FAST uses PAC (Protected
Access Credential) for a secure communication.
Answer option A is incorrect. PEAP uses only a server-side certificate. The server-side certificate
creates an encrypted tunnel and then
authentication occurs inside the tunnel.
Answer option C is incorrect. In WEP authentication, an administrator cannot authenticate any user;
he only verifies that the user has a key.