Which authentication method is typically used with WPA2-Enterprise?

Which authentication method is typically used with WPA2-Enterprise?

• A. Uses PSK
• B. Uses Kerberos
• C. Uses certificates
• D. Uses EAP or RADIUS for centralized client authentication

Answer: (D)

WPA2-Enterprise uses a centralized authentication framework based on 802.1X. In this setup, the client and the network perform an authentication exchange through an Extensible Authentication Protocol (EAP) method with a RADIUS server as the backend. The RADIUS server verifies credentials and enforces access policies, issuing the appropriate session keys for secure communication. This centralized model is what distinguishes Enterprise from Personal, which relies on a shared pre-shared key. While certificates can be part of some EAP methods (like EAP-TLS), the standard description of WPA2-Enterprise is about using EAP with a RADIUS server for centralized client authentication, making that option the best fit. Kerberos is not the defining method for WPA2-Enterprise, though it may be used in some internal networks for other purposes.

WPA2-Enterprise uses a centralized authentication framework based on 802.1X. In this setup, the client and the network perform an authentication exchange through an Extensible Authentication Protocol (EAP) method with a RADIUS server as the backend. The RADIUS server verifies credentials and enforces access policies, issuing the appropriate session keys for secure communication. This centralized model is what distinguishes Enterprise from Personal, which relies on a shared pre-shared key. While certificates can be part of some EAP methods (like EAP-TLS), the standard description of WPA2-Enterprise is about using EAP with a RADIUS server for centralized client authentication, making that option the best fit. Kerberos is not the defining method for WPA2-Enterprise, though it may be used in some internal networks for other purposes.