County policy requires mutual certificate authentication for staff laptops on the corporate SSID. Which EAP method best meets that requirement?
Select an answer to reveal the explanation.
Short Explanation
Mutual cert auth is a handshake where both sides show a trusted ID card. EAP-TLS is built for that. Password PEAP, ancient MD5, or a shared SAE passphrase don’t give you laptop certificates both ways.
Full Explanation
EAP-TLS performs mutual authentication using X.509 certificates on both the client and the authentication server, which matches a policy requiring certificate-based mutual auth for staff endpoints. Password-based PEAP, EAP-MD5, and Personal/SAE shared secrets do not satisfy mutual client-certificate authentication on an enterprise WLAN.