CompTIA Network+ (N10-007) — Question 608

A Chief Information Security Officer (CISO) has decided to implement a secure and user-friendly way to connect to the corporate wireless network. Each workstation will be authenticated individually using a unique certificate that will be deployed to the workstation by the organization's certificate authority. Which of the following authentication methods would meet this requirement?

Answer options

• A. PEAP
• B. WP2-PSK
• C. Captive portal
• D. EAP-TLS

Correct answer: D

Explanation

EAP-TLS is the correct answer because it utilizes individual certificates for authentication, ensuring secure access to the wireless network for each workstation. PEAP, while secure, typically relies on a username and password for the inner authentication, and WP2-PSK uses a pre-shared key, which does not meet the certificate requirement. A captive portal is not an authentication method that uses certificates.