Exam 220-1102 topic 1 question 271 discussion

Answer A. This method provides mutual authentication through the use of a short, easy to remember password. Compared with other common authentication methods, EAP-EKE is not susceptible to dictionary attacks. Neither does it require the availability of public-key certificates.

A or C ????

To allow automatic logins to a wireless network using certificates instead of passwords, the network must support 802.1X authentication, which uses a RADIUS (Remote Authentication Dial-In User Service) server to handle authentication. Certificates can be used as part of the authentication process to provide secure and passwordless access.EAP-EKE: EAP (Extensible Authentication Protocol) with Encrypted Key Exchange (EKE) is an authentication mechanism but is not specifically tied to certificate-based authentication for wireless networks.

EAP-EKE DOES NOT use CERTIFICATES it uses a password. EAP-TLS is what uses certificates. RADIUS servers can be configured to use certificates, the answer is A.

EAP-EKE is an authentication method for Extensible Authentication Protocol (EAP) that uses the Encrypted Key Exchange (EKE) protocol. EAP is a framework that allows networking vendors to create and install authentication methods, or EAP methods, on authentication servers and access clients.

Is it just me or is this question too hard for A+ ?

The answer is C

RADIUS (Remote Authentication Dial-In User Service) is a network protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users. It supports certificate-based authentication, allowing automatic logins using certificates instead of passwords.

Makes the most sense.

EAP-TLS is also a PKI when I researched PKIs this is what I found. "SecureW2’s Managed PKI is the foundation for enabling secure EAP-TLS authentication, allowing organizations to reap the security benefits associated with certificate-based authentication without the difficulties of constructing their own PKI infrastructure." https://www.securew2.com/blog/what-is-eap-tls

RADIUS supports various authentication methods, including certificate-based authentication. It allows devices to present digital certificates during the authentication process.

Answer is C: https://learn.microsoft.com/en-us/windows-server/networking/technologies/extensible-authentication-protocol/network-access?tabs=eap-tls%2Cserveruserprompt-eap-tls%2Ceap-sim

It's A) RADIUS While AES (Advanced Encryption Standard) is a symmetric encryption standard often used in Wi-Fi security, and MFA (Multi-Factor Authentication) is a method of confirming a user’s claimed identity, they are not specifically related to the use of certificates for authentication. EAP-EKE (Extensible Authentication Protocol-Encrypted Key Exchange) is a method to prevent password cracking attacks but does not necessarily use certificates for authentication.

Chatgtp

It said small office..RADIUS is for enterprise, so..

Extensible Authentication Protocol (EAP) is used to pass the authentication information between the supplicant (the Wi-Fi workstation) and the authentication server (Microsoft IAS or other). The EAP type actually handles and defines the authentication

Its A. As the EAP-TLS uses a certificate-based authentication process that is highly secure. When a client device seeks to connect to a network, it presents its digital certificate, which contains a public key, to the authentication server, which is usually a RADIUS server. Instead of EAP-EKE, is one of the few EAP methods that provide secure mutual authentication using short passwords and no need for public key certificates.