PEAP Authentication Methods
Question
Which of the following does PEAP use to authenticate the user inside an encrypted tunnel? Each correct answer represents a complete solution.
Choose two.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.BA.
PEAP stands for Protected Extensible Authentication Protocol, which is a protocol used to secure wireless networks. PEAP is an authentication protocol that creates an encrypted tunnel between the client and the authentication server, providing mutual authentication between the two. Within this encrypted tunnel, PEAP uses an inner authentication method to authenticate the user.
There are several possible inner authentication methods that PEAP can use, including MS-CHAP v2, GTC, and EAP-TLS.
MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol version 2) is a widely used inner authentication method that provides mutual authentication between the client and the authentication server. MS-CHAP v2 uses a password-based authentication mechanism, where the client sends its username and password to the authentication server, and the authentication server verifies the password and sends back a success or failure message.
GTC (Generic Token Card) is another inner authentication method that uses a one-time password (OTP) system. In this method, the client generates a one-time password, which is then sent to the authentication server for verification.
AES (Advanced Encryption Standard) and RC4 (Rivest Cipher 4) are encryption algorithms that can be used to secure the PEAP tunnel itself, but they are not inner authentication methods.
Therefore, the correct answers to the question are:
B. MS-CHAP v2, and A. GTC
as both of these are possible inner authentication methods used by PEAP to authenticate the user inside the encrypted tunnel.
