GIAC Exam GPEN Topic 8 Question 45 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 45
Topic #: 8

[All GPEN Questions]

The employees of EWS Inc. require remote access to the company's Web servers. In order to provide solid wireless security, the company uses EAP-TLS as the authentication protocol. Which of the following statements are true about EAP-TLS?

Each correct answer represents a complete solution. Choose all that apply.

AIt provides a moderate level of security.

BIt uses password hash for client authentication.

CIt uses a public key certificate for server authentication.

DIt is supported by all manufacturers of wireless LAN hardware and software.

Show Suggested Answer

Suggested Answer: A

by Yoko at Apr 26, 2024, 03:24 AM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Denae

4 months ago

I love how they're testing our wireless security knowledge. Next up, they'll be asking about WPA3 and how to hack into the company's fridge.

upvoted 0 times

Samira

2 months ago

I wonder if they'll also ask about WPA3 next.

upvoted 0 times

...

Eleonora

3 months ago

D) It provides a moderate level of security.

upvoted 0 times

...

Lenna

3 months ago

B) It uses a public key certificate for server authentication.

upvoted 0 times

...

Amie

3 months ago

A) It is supported by all manufacturers of wireless LAN hardware and software.

upvoted 0 times

...

Ronny

4 months ago

Password hashes? Nah, EAP-TLS is all about those client certs, baby. Gotta keep those hackers out with some serious encryption.

upvoted 0 times

...

Cherilyn

4 months ago

Using a public key cert for server auth is a good call, but I wouldn't call EAP-TLS 'moderate' security. That's like calling a diamond 'moderately shiny'.

upvoted 0 times

...

Jillian

4 months ago

But does it provide a moderate level of security?

upvoted 0 times

...

Winifred

4 months ago

EAP-TLS is great for secure remote access, but I'm not sure all manufacturers support it. Maybe they should have included an option about client certificates too.

upvoted 0 times