Exam 350-401 topic 1 question 108 discussion

What is a fact about Cisco EAP-FAST? A. It requires a client certificate. ==> WRONG. it uses PAC (Protected Access Credentials) B. It is an IETF standard. ==> WRONG, please watch the question. it says CISCO FAST not IEEE C. It does not require a RADIUS server certificate. ==> CORRECT or lets say best answer from given ones D. It operates in transparent mode.==> WRONG. I got no clue what is there to be transparent Answer: C

C is Correct. EAP-FACT uses a PAC. Creates its own certificate. No AAA needed.

C is correct

C is correct. There is no client or server certificates used in EAP-FAST.

The EAP-FAST protocol is a publicly accessible IEEE 802.1X EAP type that Cisco developed to support customers that cannot enforce a strong password policy and want to deploy an 802.1X EAP type that does not require digital certificates.

The given answer is correct

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/eap-fast/200322-Understanding-EAP-FAST-and-Chaining-imp.html

A: should be the right answer.

C seams to be worng... EAP-FAST (Flexible Authentication via Secure Tunneling) was developed by Cisco*. Instead of using a certificate to achieve mutual authentication. EAP-FAST authenticates by means of a PAC (Protected Access Credential) which can be managed dynamically by the authentication server. The PAC can be provisioned (distributed one time) to the client either manually or automatically. Manual provisioning is delivery to the client via disk or a secured network distribution method. Automatic provisioning is an in-band, over the air, distribution. https://www.intel.com/content/www/us/en/support/articles/000006999/wireless.html