Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) — Question 1019

An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this authentication type?

Answer options

• A. LDAP
• B. EAP-FAST
• C. EAP-TLS
• D. PEAP

Correct answer: D

Explanation

PEAP is the correct choice because it encapsulates the EAP MS-CHAPv2 within a secure tunnel, allowing for safe transmission of credentials. The other options, while valid EAP methods, do not provide the necessary framework for encapsulating MS-CHAPv2 in this context.