Question

You need to deploy 802.1x authentication that supports client-side digital certificates for authentication with access points. Which technology should you deploy?

a) WEP
b) EAP-TLS
c) EAP-PEAP
d) Cisco LEAP

Answer 1

EAP-TLS is the technology to deploy for 802.1x authentication that supports client-side digital certificates, offering mutual authentication with high security through the use of public key infrastructure.

Step-by-step explanation:

Deploying 802.1x Authentication with Client-Side Digital Certificates

If you need to deploy 802.1x authentication that supports client-side digital certificates for authentication with access points, the technology you should deploy is EAP-TLS (Extensible Authentication Protocol-Transport Layer Security). EAP-TLS provides mutual authentication, where both the client and the server authenticate each other using digital certificates. This method is widely recognized for its high security as it leverages the public key infrastructure.

Other options like WEP (Wired Equivalent Privacy) and Cisco LEAP (Lightweight Extensible Authentication Protocol) are outdated and present security vulnerabilities. EAP-PEAP (Protected Extensible Authentication Protocol) can be used with certificates, but it only requires the server to present a certificate, while the client can use both certificates or a username and password combination.