A city library has specialty tablets that cannot store client certificates but can send a username and password inside a TLS tunnel to RADIUS. Which EAP method fits that constraint?
Select an answer to reveal the explanation.
Short Explanation
No room for a client cert on the tablet? EAP-TTLS still builds a TLS tunnel to the server, then slips the username/password inside. You’re not stuck demanding EAP-TLS certs—or falling back to open or WEP.
Full Explanation
EAP-TTLS establishes a TLS tunnel authenticated by the server certificate and then carries inner authentication such as username/password without requiring client certificates. That suits constrained municipal devices that cannot hold client certs. Mandating EAP-TLS alone, open authentication, or WEP fails the constraint or reintroduces deprecated weak security.