Protected EAP (PEAP) is best described as which of the following?

Protected EAP (PEAP) is best described as which of the following?

• A. An attestation model built upon XML for SOAP-based web services.
• B. A proprietary protocol that only works on Cisco-based devices.
• C. Uses server certificates and Microsoft's Active Directory databases to authenticate a client's password.
• D. An open standard decentralized protocol for authentication users.

Answer: (C)

PEAP works by protecting the entire authentication transaction with a TLS tunnel. The client first verifies the server’s identity using a certificate, establishing a secure channel. Inside that protected tunnel, the user’s password is transmitted to the authentication server, which then validates those credentials. In many network setups—especially those using Windows domains—the authentication server checks the credentials against Active Directory. That connection between PEAP’s protected tunnel and AD-backed credential verification is what the option describes, making it the best match. The other descriptions don’t fit PEAP: it isn’t an XML-based attestation model for SOAP web services, it isn’t a Cisco-only proprietary protocol, and PEAP isn’t defined as an open decentralized protocol for authentication.

PEAP works by protecting the entire authentication transaction with a TLS tunnel. The client first verifies the server’s identity using a certificate, establishing a secure channel. Inside that protected tunnel, the user’s password is transmitted to the authentication server, which then validates those credentials. In many network setups—especially those using Windows domains—the authentication server checks the credentials against Active Directory. That connection between PEAP’s protected tunnel and AD-backed credential verification is what the option describes, making it the best match.

The other descriptions don’t fit PEAP: it isn’t an XML-based attestation model for SOAP web services, it isn’t a Cisco-only proprietary protocol, and PEAP isn’t defined as an open decentralized protocol for authentication.