MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What does EAP-FAST stand for in cybersecurity?
   a. Extensible Authentication Protocol – Flexible Authentication via Secure Tunneling
   b. Extensible Authentication Protocol – Fast Access Security Tunnel
   c. Extensible Access Protocol – Flexible Authentication Secured Transmission
   d. Extensible Access Protection – Fast Authentication System
   Answer: a. Extensible Authentication Protocol – Flexible Authentication via Secure Tunnelingcisco+1
2. What primary purpose does EAP-FAST serve?
   a. To enable secure communication between a client and authentication server using TLS
   b. To optimize network routing algorithms
   c. To encrypt email communications
   d. To speed up file transfers over a network
   Answer: a. To enable secure communication between a client and authentication server using TLSrfc-editor+1
3. Which protocol is used by EAP-FAST to establish a secure tunnel?
   a. TLS (Transport Layer Security)
   b. SSL (Secure Socket Layer)
   c. IPsec
   d. SSH (Secure Shell)
   Answer: a. TLS (Transport Layer Security)cisco+1
4. What are Protected Access Credentials (PACs) in EAP-FAST?
   a. Credentials distributed to clients to establish an authentication tunnel
   b. Usernames and passwords for network login
   c. Digital certificates issued by certification authorities
   d. Firewall configuration files
   Answer: a. Credentials distributed to clients to establish an authentication tunnelmrncciew+1
5. How many main components can a PAC contain?
   a. Up to three components – shared secret, opaque element, and other info
   b. One component – password only
   c. Two components – certificate and key
   d. Four components – key, token, certificate, and timestamp
   Answer: a. Up to three components – shared secret, opaque element, and other infomrncciew+1
6. What feature of EAP-FAST helps protect against man-in-the-middle (MitM) attacks?
   a. Establishing a mutually authenticated protected tunnel
   b. Using longer passwords
   c. Encrypting emails with PGP
   d. Using VPN connections
   Answer: a. Establishing a mutually authenticated protected tunnelrfc-editor+1
7. What does the TLS handshake in EAP-FAST accomplish in the first phase?
   a. It provides an authenticated key exchange and establishes the secure tunnel
   b. It encrypts the user’s email messages
   c. It transfers files securely
   d. It routes traffic through a proxy server
   Answer: a. It provides an authenticated key exchange and establishes the secure tunnelcisco+1
8. What kind of authentication methods can EAP-FAST support inside the tunnel?
   a. Different password authentication interfaces such as MS-CHAP and LDAP
   b. Digital signatures only
   c. IP address filtering only
   d. Static password authentication only
   Answer: a. Different password authentication interfaces such as MS-CHAP and LDAPrfc-editor+1
9. What negotiation occurs between client and server after the TLS tunnel establishment in EAP-FAST?
   a. Version negotiation to ensure compatible protocol versions
   b. IP address assignment negotiation
   c. File sharing protocol negotiation
   d. Encryption algorithm negotiation for email
   Answer: a. Version negotiation to ensure compatible protocol versionscisco
10. What is the role of the PAC-Key in EAP-FAST?
    a. It is a pre-shared key that establishes the authentication tunnel
    b. It is a digital certificate longer than 2048 bits
    c. It is an IP filtering rule in the firewall
    d. It is a VPN encryption key
    Answer: a. It is a pre-shared key that establishes the authentication tunnelmrncciew+1
11. What is the PAC-Opaque component?
    a. A variable-length field sent to the authentication server during tunnel establishment
    b. The client’s plain-text password
    c. The encryption algorithm used for emails
    d. A firewall rule blocking unauthorized access
    Answer: a. A variable-length field sent to the authentication server during tunnel establishmentcisco
12. What does the PAC-Info component typically include?
    a. The authority identity of the PAC issuer and optionally PAC key lifetime
    b. The user’s email address only
    c. The MAC address of the client
    d. Server IP addresses allowed for access
    Answer: a. The authority identity of the PAC issuer and optionally PAC key lifetimecisco
13. How are PACs protected on a client machine?
    a. They are encrypted and tied to the host machine using Microsoft Crypto API
    b. Stored as plain text files
    c. Shared via email attachments
    d. Written on a physical card
    Answer: a. They are encrypted and tied to the host machine using Microsoft Crypto APIcisco
14. Can PACs be copied and used on other machines?
    a. No, they are machine-specific and cannot be copied
    b. Yes, PACs are freely transferable
    c. Yes, but only if the user has admin rights
    d. No, unless manually decrypted first
    Answer: a. No, they are machine-specific and cannot be copiedcisco
15. What does mutual authentication mean in EAP-FAST?
    a. Both the client and server verify each other’s authenticity
    b. The client authenticates only the server
    c. The server authenticates only the client
    d. The authentication is done by a third party
    Answer: a. Both the client and server verify each other’s authenticitymrncciew+1
16. What type of attacks is EAP-FAST immune to due to its secure tunneling method?
    a. Passive dictionary attacks and man-in-the-middle attacks
    b. DDoS attacks only
    c. Phishing attacks only
    d. SQL injection attacks
    Answer: a. Passive dictionary attacks and man-in-the-middle attackscisco
17. What is the main advantage of EAP-FAST compared to LEAP?
    a. It uses PACs instead of vulnerable password handshakes, improving security
    b. It is faster than HTTPS for web browsing
    c. It does not require server authentication
    d. It uses MAC address filtering for security
    Answer: a. It uses PACs instead of vulnerable password handshakes, improving securitywiki.freeradius+1
18. How many phases are involved in EAP-FAST authentication?
    a. Two main phases: TLS tunnel establishment and inner authentication
    b. One phase only
    c. Three phases
    d. Four phases including PAC renewal
    Answer: a. Two main phases: TLS tunnel establishment and inner authenticationmrncciew+1
19. What happens during the second phase of EAP-FAST authentication?
    a. Client and server exchange requests and responses inside the TLS tunnel for authentication
    b. The tunnel is torn down and connections reset
    c. The server issues a new PAC key
    d. Client disconnects and reauthenticates through VPN
    Answer: a. Client and server exchange requests and responses inside the TLS tunnel for authenticationcisco
20. Which RFC document officially defines EAP-FAST?
    a. RFC 4851
    b. RFC 4251
    c. RFC 5246
    d. RFC 7540
    Answer: a. RFC 4851rfc-editor+1
21. What role does the Authentication Server (AS) play in EAP-FAST?
    a. It authenticates the client and establishes the TLS tunnel
    b. Assigns IP addresses
    c. Routes data between subnets
    d. Logs network traffic only
    Answer: a. It authenticates the client and establishes the TLS tunnelrfc-editor
22. What does EAP stand for?
    a. Extensible Authentication Protocol
    b. External Access Protocol
    c. Encrypted Authentication Process
    d. Enterprise Access Procedure
    Answer: a. Extensible Authentication Protocolfrontegg+1
23. What is the purpose of TLV objects in EAP-FAST?
    a. To carry authentication-related data within the secure tunnel
    b. To encode video streams
    c. To represent IP packets
    d. To store usernames only
    Answer: a. To carry authentication-related data within the secure tunnelcisco
24. Which of these is NOT a component of PAC in EAP-FAST?
    a. Digital signature from CA
    b. Shared secret (PAC-Key)
    c. Opaque element (PAC-Opaque)
    d. Other optional info (PAC-Info)
    Answer: a. Digital signature from CAmrncciew+1
25. Why does EAP-FAST minimize authentication server requirements?
    a. It uses a single strong shared secret to reduce per-user state management
    b. It requires only IP whitelisting
    c. It offloads authentication to client hardware
    d. It eliminates the need for encryption
    Answer: a. It uses a single strong shared secret to reduce per-user state managementcisco
26. Can EAP-FAST support one-time password (OTP) methods?
    a. Yes, it supports various password authentication interfaces including OTP
    b. No, it supports only static passwords
    c. No, it works only with digital certificates
    d. Only with hardware tokens
    Answer: a. Yes, it supports various password authentication interfaces including OTPcisco
27. What is the benefit of using PACs for authentication compared to certificates?
    a. PACs avoid the complexity and overhead of certificate management
    b. PACs work without any encryption
    c. PACs are publicly shared
    d. PACs require hardware tokens
    Answer: a. PACs avoid the complexity and overhead of certificate managementjumpcloud+1
28. What authentication method is commonly used inside the EAP-FAST tunnel for username/password?
    a. EAP-GTC (Generic Token Card)
    b. EAP-TLS only
    c. PEAP only
    d. PAP only
    Answer: a. EAP-GTC (Generic Token Card)mrncciew
29. What does phase 0 in EAP-FAST represent?
    a. Automatic PAC provisioning
    b. Renewing user passwords
    c. Certificate revocation
    d. VPN connection setup
    Answer: a. Automatic PAC provisioningmrncciew
30. In EAP-FAST, what is the “outer identity”?
    a. An identity sent by the client during initial handshake, often anonymized
    b. The client’s IP address
    c. The MAC address of the access point
    d. The server’s hostname
    Answer: a. An identity sent by the client during initial handshake, often anonymizedmrncciew
31. Is a server certificate mandatory in EAP-FAST for tunnel establishment?
    a. No, EAP-FAST can establish a tunnel without server certificates using PACs
    b. Yes, always mandatory
    c. Only if using PEAP inside the tunnel
    d. Only during PAC provisioning
    Answer: a. No, EAP-FAST can establish a tunnel without server certificates using PACsjumpcloud+1
32. What is the default EAP type number for EAP-FAST?
    a. 43
    b. 13
    c. 25
    d. 21
    Answer: a. 43mrncciew
33. What ensures PACs are secure and machine-specific?
    a. Encryption with Microsoft Crypto API and ACLs
    b. Copy protection via USB dongles
    c. Storage in plain text files
    d. Sharing over HTTPS only
    Answer: a. Encryption with Microsoft Crypto API and ACLscisco
34. What kind of network environments benefit most from EAP-FAST?
    a. Enterprise wireless networks with complex authentication needs
    b. Home wireless networks only
    c. Public Wi-Fi hotspots without authentication
    d. Wired-only LANs without authentication
    Answer: a. Enterprise wireless networks with complex authentication needsjumpcloud+1
35. What is the relation of EAP-FAST to IEEE 802.1X?
    a. EAP-FAST is an EAP method used within IEEE 802.1X authentication framework
    b. EAP-FAST replaces 802.1X entirely
    c. EAP-FAST is unrelated to 802.1X
    d. IEEE 802.1X is an outdated protocol replaced by EAP-FAST
    Answer: a. EAP-FAST is an EAP method used within IEEE 802.1X authentication frameworkintel+1
36. Which protocol is typically used as an inner authentication inside EAP-FAST?
    a. EAP-GTC
    b. CHAP
    c. TACACS+
    d. RADIUS
    Answer: a. EAP-GTCmrncciew
37. What does EAP-FAST use to protect client identity information during authentication?
    a. A protected TLS tunnel established in phase 1
    b. Plain text negotiation
    c. IP whitelisting
    d. MAC address filtering
    Answer: a. A protected TLS tunnel established in phase 1cisco
38. What is one of the key reasons Cisco developed EAP-FAST?
    a. To replace LEAP due to its security weaknesses
    b. To make WPA2 obsolete
    c. To eliminate the need for Wi-Fi passwords
    d. To replace VPN technologies
    Answer: a. To replace LEAP due to its security weaknesseswiki.freeradius+1
39. Can EAP-FAST be used for both wired and wireless networks?
    a. Yes, it is designed for flexible deployment in various network types
    b. No, strictly wireless only
    c. No, strictly wired only
    d. Only for virtual private networks
    Answer: a. Yes, it is designed for flexible deployment in various network typesrfc-editor
40. How does EAP-FAST improve computational efficiency for clients?
    a. By using lightweight TLS tunnel establishment optimized for limited power devices
    b. By offloading tasks to cloud servers
    c. By disabling encryption selectively
    d. By using IPsec only
    Answer: a. By using lightweight TLS tunnel establishment optimized for limited power devicescisco
41. What does the “opaque” term in PAC-Opaque imply?
    a. The content is variable and not interpreted by the client, only by the server
    b. The data is transparent to everyone on the network
    c. The data must be encrypted manually
    d. The data is visible in plain text on the client
    Answer: a. The content is variable and not interpreted by the client, only by the servercisco
42. Which entity typically issues PACs to clients?
    a. A PAC authority server such as Cisco Secure ACS
    b. The client’s operating system
    c. The router firmware
    d. The client’s web browser
    Answer: a. A PAC authority server such as Cisco Secure ACScisco
43. How does EAP-FAST handle roaming between access points?
    a. It enables fast re-establishment of secure tunnels using TLS extensions and PACs
    b. It requires full reauthentication every time
    c. It sends user credentials in clear text
    d. It disables TLS during roaming
    Answer: a. It enables fast re-establishment of secure tunnels using TLS extensions and PACscisco
44. Which of the following is true about PAC storage?
    a. Persistent PACs are encrypted and stored with ACL protection; non-persistent PACs are in volatile memory
    b. All PACs are stored in plain text on disk
    c. PACs are emailed to the user each time
    d. PACs are stored only on external USB devices
    Answer: a. Persistent PACs are encrypted and stored with ACL protection; non-persistent PACs are in volatile memorycisco
45. How does EAP-FAST contribute to network access security?
    a. By establishing a secure tunnel that protects authentication credentials and identity
    b. By disabling encryption to speed up access
    c. By requiring users to enter passwords in plain text
    d. By using MAC filtering exclusively
    Answer: a. By establishing a secure tunnel that protects authentication credentials and identitycisco
46. What is a key advantage of using EAP-FAST over EAP-TLS in some deployments?
    a. It does not require expensive certificate infrastructure for clients
    b. It uses stronger encryption algorithms
    c. It works with older wireless standards only
    d. It requires hardware tokens for authentication
    Answer: a. It does not require expensive certificate infrastructure for clientsjumpcloud
47. Does EAP-FAST allow the use of multiple inner authentication methods?
    a. Yes, it provides flexibility to support multiple inner methods depending on policy
    b. No, it supports only one fixed method
    c. No, it does not support inner authentication
    d. Only supports certificate-based methods
    Answer: a. Yes, it provides flexibility to support multiple inner methods depending on policycisco
48. What does EAP-FAST rely on to minimize computation and power use on wireless clients?
    a. Efficient TLS tunnel establishment and authentication methods
    b. Offloading to third-party authentication servers
    c. Disabling encryption
    d. Using static passwords only
    Answer: a. Efficient TLS tunnel establishment and authentication methodscisco
49. In EAP-FAST, what is a typical use for the TLV format?
    a. To encapsulate a series of authentication protocol data inside the tunnel
    b. To format email messages
    c. To encode video streams
    d. To store IP addresses
    Answer: a. To encapsulate a series of authentication protocol data inside the tunnelcisco
50. What is one risk addressed by EAP-FAST’s use of TLS tunnels and PACs?
    a. Preventing eavesdropping on weak credentials during authentication
    b. Resolving IP address conflicts
    c. Speeding up DNS resolution
    d. Encrypting web browsing traffic
    Answer: a. Preventing eavesdropping on weak credentials during authenticationcisco

1. https://www.cisco.com/en/US/docs/wireless/wlan_adapter/eap_types/fast/admin/guide/EF_ovrvw.pdf
2. https://www.rfc-editor.org/rfc/rfc4851.html
3. https://mrncciew.com/2014/08/26/cwsp-eap-fast/
4. https://wiki.freeradius.org/protocol/EAP
5. https://frontegg.com/blog/extensible-authentication-protocol-eap
6. https://jumpcloud.com/blog/extensible-authentication-protocol-eap-types
7. https://www.intel.com/content/www/us/en/support/articles/000006999/wireless/legacy-intel-wireless-products.html
8. https://doubleoctopus.com/security-wiki/protocol/extensible-authentication-protocol/
9. https://datatracker.ietf.org/doc/html/rfc5421
10. https://www.geeksforgeeks.org/computer-networks/wireless-security-part-2/
11. https://www.scribd.com/document/544734058/Final-Quiz-1Network-Security-txt
12. https://docs.portnox.com/topics/eap_methods
13. https://www.brainscape.com/flashcards/exam-questions-702530/packs/1272464
14. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/eap-fast/200322-Understanding-EAP-FAST-and-Chaining-imp.html
15. https://cybr.com/certifications-archives/authentication-protocols-802-1x-eap-peap-eap-fast-tls-ttls-and-radius/
16. https://www.watelectronics.com/mcq/wifi/
17. https://mrncciew.com/tag/eap-fast/
18. https://learn.microsoft.com/en-us/windows-server/networking/technologies/extensible-authentication-protocol/network-access
19. https://www.youtube.com/watch?v=wKlHpcN3DkI
20. http://www.briefmenow.org/cisco/which-statement-is-true-about-eap-fast/