Which EAP method uses TLS to create a protected tunnel and commonly relies on a username and password for authentication?

Which EAP method uses TLS to create a protected tunnel and commonly relies on a username and password for authentication?

• A. EAP-TLS uses certificates for mutual authentication; EAP-PEAP creates a protected tunnel using TLS with username/password.
• B. EAP-PEAP uses TLS only with certificates.
• C. EAP-TTLS uses only certificates.
• D. EAP-TLS uses certificates for mutual authentication; EAP-PEAP creates a protected tunnel using TLS with username/password.

Answer: (C)

The concept here is EAP methods that use a TLS-protected tunnel with inner authentication. The method that fits this description best is EAP-PEAP. It uses a server certificate to establish a secure TLS tunnel, and inside that tunnel the client authenticates using a username and password (often via an inner method like MSCHAPv2). EAP-TLS, on the other hand, relies on certificates for mutual authentication and doesn’t rely on username/password in the same way. EAP-TTLS also creates a TLS tunnel with a server certificate and then authenticates inside, but PEAP is the classic example of a TLS tunnel plus username/password inside.

The concept here is EAP methods that use a TLS-protected tunnel with inner authentication. The method that fits this description best is EAP-PEAP. It uses a server certificate to establish a secure TLS tunnel, and inside that tunnel the client authenticates using a username and password (often via an inner method like MSCHAPv2).

EAP-TLS, on the other hand, relies on certificates for mutual authentication and doesn’t rely on username/password in the same way. EAP-TTLS also creates a TLS tunnel with a server certificate and then authenticates inside, but PEAP is the classic example of a TLS tunnel plus username/password inside.