EAP-TLS requires both server and client-side digital certificates, which adds complexity in client certificate management.
EAP-TTLS uses a server certificate to establish a secure TLS tunnel, after which user credentials (e.g., username/password) are sent inside the encrypted tunnel. No client certificate is needed.
Incorrect:
A. EAP-TLS also encrypts credentials using TLS.
B. EAP-TLS supports client certificates (it’s the core requirement).
C. Both EAP methods require an authentication server.
[References:, , CWSP-208 Study Guide, Chapter 4 (EAP Methods Comparison), , CWNP EAP-TTLS Deployment Guide, ]
Submit