Which wireless authentication mode uses the access point as a pass-through for credentials verified by an AAA server?

Which wireless authentication mode uses the access point as a pass-through for credentials verified by an AAA server?

• A. pre-shared key (PSK)
• B. enterprise authentication
• C. certificate-based authentication
• D. open authentication

Answer: (B)

The situation described is enterprise wireless authentication using 802.1X with an AAA server. In this mode, the access point acts as an 802.1X authenticator and simply forwards the user’s credentials to an AAA server (often via RADIUS). The AAA server then validates those credentials against a directory or identity store and tells the AP whether to grant or deny access. If granted, a session key is established to protect traffic between the client and the network. This is distinct from using a pre-shared key, where everyone uses the same key and the authentication happens locally on the AP without an external server. It’s also distinct from open authentication, where no credentials are required and there’s no authentication or encryption provided by the network. Certificate-based authentication is a specific method that can be used within enterprise authentication (for example, EAP-TLS uses certificates), but the described pass-through with an AAA server refers to the broader enterprise authentication approach.

The situation described is enterprise wireless authentication using 802.1X with an AAA server. In this mode, the access point acts as an 802.1X authenticator and simply forwards the user’s credentials to an AAA server (often via RADIUS). The AAA server then validates those credentials against a directory or identity store and tells the AP whether to grant or deny access. If granted, a session key is established to protect traffic between the client and the network.

This is distinct from using a pre-shared key, where everyone uses the same key and the authentication happens locally on the AP without an external server. It’s also distinct from open authentication, where no credentials are required and there’s no authentication or encryption provided by the network. Certificate-based authentication is a specific method that can be used within enterprise authentication (for example, EAP-TLS uses certificates), but the described pass-through with an AAA server refers to the broader enterprise authentication approach.