GSLC-2020: GIAC Security LeadershipDemo

By GIAC · Question Mode

QuestionQ124

Networking Concepts for Managers

Mark is a Network Administrator for Infonet Inc. The company operates a Windows 2003 domain-based network containing five Windows 2003 member servers and 300 Windows XP Professional client computers.

Mark is configuring a wireless network for the company and plans to implement 802.1X authentication for it. He does not plan to use a public key infrastructure (PKI) or certificates for authentication. Mark also requires an encrypted authentication channel and fast reconnection through cached session keys.

Which authentication method should he use to accomplish this task?

  • A Protected EAP (PEAP)
  • B EAP-Transport Layer Security (EAP-TLS)
  • C Shared Key authentication
  • D Digest authentication
Explanation

Protected EAP (PEAP) creates an encrypted TLS tunnel for the authentication exchange and can resume cached TLS sessions for quicker reconnects. It supports password-based inner authentication, avoiding the client certificate/PKI requirement of EAP-TLS; EAP-TLS requires certificates for both client and server authentication.

Community Discussion

No comments yet. Be the first to start the discussion!