CompTIA CASP+ (CAS-003) — Question 206

A new security policy states all wireless and wired authentication must include the use of certificates when connecting to internal resources within the enterprise
LAN by all employees.
Which of the following should be configured to comply with the new security policy? (Choose two.)

Answer options

• A. SSO
• B. New pre-shared key
• C. 802.1X
• D. OAuth
• E. Push-based authentication
• F. PKI

Correct answer: C, F

Explanation

The correct answers are C and F because 802.1X is a network access control method that supports certificate-based authentication, ensuring secure access to the network. PKI (Public Key Infrastructure) is essential for managing digital certificates and public-key encryption, making it a necessary component for compliance with the security policy. The other options do not inherently provide the required certificate-based authentication needed for this policy.