MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. PEAP stands for
   a. Protected Extensible Authentication Protocol
   b. Private Encryption Access Protocol
   c. Public Encrypted Authentication Path
   d. Protected Exchange Access Process
   Answer: atechtarget​
2. PEAP was primarily designed to secure
   a. Wired Ethernet networks
   b. Wireless LANs (802.11 networks)
   c. VPN tunnels only
   d. Cloud data storage systems
   Answer: btechtarget​
3. PEAP operates by encapsulating EAP within
   a. SSL
   b. IPSec
   c. TLS tunnel
   d. SSH
   Answer: ctechtarget​
4. The main function of PEAP is to
   a. Replace EAP completely
   b. Encapsulate EAP within a secure TLS tunnel
   c. Eliminate all encryption requirements
   d. Serve as a password manager
   Answer: btechtarget​
5. The TLS tunnel in PEAP protects
   a. Inner EAP authentication data
   b. Only the server
   c. MAC addresses
   d. SSID broadcasts
   Answer: atechtarget​
6. PEAP uses how many phases for its operation?
   a. One
   b. Two
   c. Three
   d. Four
   Answer: bokta+1​
7. In PEAP Phase 1, the TLS tunnel is
   a. Established and server authenticated
   b. Used for data transmission
   c. Skipped in certain versions
   d. Configured after EAP authentication
   Answer: aokta+1​
8. In PEAP Phase 2,
   a. The TLS session is torn down
   b. EAP authentication occurs inside the tunnel
   c. Certificates are exchanged again
   d. The client disconnects
   Answer: bokta+1​
9. PEAP provides primarily
   a. Authentication
   b. Authorization
   c. Accounting
   d. Routing
   Answer: aportnox​
10. The most common inner EAP method with PEAP is
    a. EAP-MD5
    b. EAP-TLS
    c. EAP-MSCHAPv2
    d. EAP-AKA
    Answer: cmrncciew+1​
11. PEAP enhances security by encrypting
    a. Network packets
    b. Identity exchange
    c. SSID
    d. DNS lookups
    Answer: btechtarget​
12. Which infrastructure service commonly supports PEAP for RADIUS communication?
    a. LDAP
    b. HTTP
    c. TCP
    d. UDP
    Answer: dportnox​
13. PEAP primarily protects against
    a. Replay attacks
    b. Dictionary and man-in-the-middle attacks
    c. SQL injection
    d. Cross-site scripting
    Answer: bportnox+1​
14. Only which side must present a digital certificate in PEAP?
    a. Client
    b. Server
    c. Both
    d. Neither
    Answer: bcybr​
15. The TLS tunnel in PEAP provides
    a. Confidentiality and integrity
    b. Compression only
    c. Routing control
    d. Performance improvement only
    Answer: aportnox​
16. The organization primarily involved in drafting PEAP standards included
    a. Cisco, Microsoft, and RSA Security
    b. IBM, Intel, and Google
    c. ISOC, ICANN, and IETF
    d. Microsoft alone
    Answer: awikipedia​
17. One of PEAP’s key improvements over EAP is
    a. Built-in per-packet encryption
    b. TLS encapsulation for EAP
    c. Added fragmentation
    d. VLAN tagging
    Answer: btechtarget​
18. The inner identity in PEAP can be
    a. Always plaintext only
    b. Anonymized
    c. Mandatory cleartext
    d. Nonexistent
    Answer: bmrncciew+1​
19. The outer identity in PEAP serves to
    a. Replace the server name
    b. Conceal the real client identity
    c. Identify certificate issuer
    d. Encrypt the SSID
    Answer: bmrncciew​
20. Which version uses EAP-GTC as inner authentication?
    a. PEAPv0
    b. PEAPv1
    c. PEAPv2
    d. PEAP-GTCv3
    Answer: bmrncciew​
21. PEAPv0 most commonly uses
    a. EAP-TLS
    b. EAP-MSCHAPv2
    c. EAP-SIM
    d. EAP-GTC
    Answer: bmrncciew​
22. PEAP strengthens wireless security under
    a. IEEE 802.11 standard
    b. IEEE 802.3
    c. IEEE 1394
    d. IEEE 802.16
    Answer: atechtarget​
23. The key derivation in PEAP occurs through
    a. Custom key algorithms
    b. TLS key derivation
    c. MD5 hashing
    d. RADIUS password exchange
    Answer: btechtarget​
24. PEAP supports fast
    a. Certificate revocation
    b. Reauthentication when roaming
    c. Bandwidth allocation
    d. Device discovery
    Answer: btechtarget​
25. PEAP was developed to overcome
    a. EAP’s lack of encryption and integrity
    b. TLS redundancy
    c. IP fragmentation issues
    d. DNS cache poisoning
    Answer: atechtarget​
26. The EAP type number for PEAP is
    a. 18
    b. 25
    c. 47
    d. 55
    Answer: blearn.microsoft​
27. One disadvantage of PEAP is
    a. Lack of server certificates
    b. Requirement for server certificates
    c. No encryption support
    d. Not usable in enterprises
    Answer: bportnox​
28. The server in PEAP plays the role of
    a. Supplicant
    b. Authenticator
    c. Authentication server
    d. Proxy router
    Answer: cportnox+1​
29. The TLS handshake in PEAP ensures
    a. Server authenticity
    b. Speed optimization
    c. Port assignment
    d. NAT traversal
    Answer: aokta​
30. PEAP phase 1 begins with
    a. Identity exchange
    b. User login
    c. Certificate revocation
    d. Packet encryption
    Answer: aokta​
31. In PEAP authentication, the supplicant creates
    a. DNS cache
    b. TLS tunnel with the server
    c. HTTP session
    d. IPSEC tunnel
    Answer: bmrncciew​
32. EAP-GTC in PEAP uses
    a. Hardware token-based challenge
    b. Passwordless entry
    c. Mutual certificate authentication
    d. Biometric keys only
    Answer: acybr+1​
33. PEAP can be used for
    a. Both wired and wireless networks
    b. Only VPNs
    c. Firewalls
    d. DNS lookups
    Answer: aportnox​
34. The inner authentication method in PEAP provides
    a. Credential validation
    b. IP routing
    c. Data segmentation
    d. Channel encryption
    Answer: aportnox​
35. Which element protects EAP communication from eavesdropping in PEAP?
    a. HTTPS
    b. TLS tunnel
    c. GRE Tunneling
    d. SSH key exchange
    Answer: bportnox​
36. The most common challenge type in PEAP is
    a. RADIUS
    b. EAP-Request
    c. SNMP
    d. TCP-ACK
    Answer: bportnox​
37. If inner authentication fails in PEAP, the client is
    a. Granted guest access
    b. Denied network access
    c. Promoted to admin
    d. Reconnected automatically
    Answer: bportnox​
38. PEAP protects conversations against
    a. Denial-of-service at Layer 2
    b. Slow-reconnect vulnerabilities
    c. Identity theft during handshake
    d. TCP timeouts
    Answer: ctechtarget​
39. PEAP leverages TLS to avoid creating a separate
    a. IPsec tunnel
    b. Key hierarchy
    c. DNS protocol
    d. Hash manager
    Answer: btechtarget​
40. The main client role in PEAP is called
    a. Supplicant or EAP peer
    b. Proxy agent
    c. Domain resolver
    d. Authenticator
    Answer: atechtarget​
41. TLS in PEAP provides
    a. Mutual cryptographic assurance
    b. Static routing rules
    c. VLAN tagging
    d. SSH replacement
    Answer: aportnox​
42. PEAP differs from EAP-TLS in that it
    a. Requires client certificates
    b. Requires only server certificate
    c. Uses IPsec
    d. Is unencrypted
    Answer: bcybr​
43. The TLS layer in PEAP is similar to that used in
    a. HTTPS
    b. FTP
    c. ICMP
    d. DNS
    Answer: aportnox​
44. PEAP improves authentication reliability by supporting
    a. Session resumption
    b. Dynamic IP allocation
    c. QoS prioritization
    d. NAT negotiation
    Answer: atechtarget​
45. A potential vulnerability in PEAP is due to
    a. Misconfigured server certificates
    b. Weak SSID
    c. VPN tunnel reuse
    d. Data compression
    Answer: aportnox​
46. The format “EAP-PEAPv0(EAP-MSCHAPv2)” refers to
    a. Outer and inner EAP types
    b. Duplicate identity
    c. Static key sharing
    d. Optional encryption
    Answer: amrncciew​
47. When the PEAP handshake begins, the first message is
    a. EAP-Request/Identity
    b. CHAP Challenge
    c. TLS Finish
    d. ACK/SYN
    Answer: aokta​
48. One benefit of PEAP for administrators is
    a. Easier rollout than EAP-TLS for legacy systems
    b. Reduced wireless speed
    c. Free public certificate sharing
    d. No need for RADIUS
    Answer: acybr​
49. The encapsulated EAP exchange in PEAP resists
    a. Dictionary attacks
    b. Wi-Fi deauthentication
    c. VLAN hopping
    d. ARP cache corruption
    Answer: atechtarget​
50. PEAP enhances 802.1X authentication by
    a. Integrating TLS tunnels to secure EAP
    b. Replacing RADIUS protocol
    c. Removing user identity from process
    d. Disabling encryption in Phase 2
    Answer: aportnox+1​

1. https://www.techtarget.com/searchsecurity/definition/PEAP-Protected-Extensible-Authentication-Protocol
2. https://www.okta.com/identity-101/peap/
3. https://www.portnox.com/cybersecurity-101/peap-authentication/
4. https://mrncciew.com/2014/08/25/cwsp-eap-peap/
5. https://cybr.com/certifications-archives/authentication-protocols-802-1x-eap-peap-eap-fast-tls-ttls-and-radius/
6. https://en.wikipedia.org/wiki/Protected_Extensible_Authentication_Protocol
7. https://learn.microsoft.com/en-us/windows-server/networking/technologies/extensible-authentication-protocol/network-access
8. https://community.cisco.com/t5/wireless/cisco-peap-vs-ms-peap/td-p/342607
9. https://community.cisco.com/kxiwq67737/attachments/kxiwq67737/discussions-wireless/26031/1/35233-cdccont_0900aecd801764fa.pdf
10. https://community.cisco.com/t5/network-access-control/802-1x-eap-tls-vs-peap-eap-tls/td-p/2901246
11. https://frontegg.com/blog/extensible-authentication-protocol-eap
12. https://www.hbs.net/blog/eap-tls
13. https://support.microsoft.com/en-us/topic/implementing-peap-ms-chap-v2-authentication-for-microsoft-pptp-vpns-d5ca1ebe-d9ee-4379-fd3f-e7be05fa3ae2
14. https://www.keytos.io/blog/pki/whats-the-difference-between-eap-ttls-and-eap-tls.html
15. https://www.cybertraining365.com/cybertraining/Topics/PEAP_(Protected_Extensible_Authentication_Protocol)
16. https://community.cisco.com/t5/network-access-control/eap-tls-vs-peap-eap-tls-performance-question/td-p/5322633
17. https://www.fuzzy-tversu.com/Vol.05,%20Issue.%202,%20July-December%20:%20%202020/79.pdf
18. https://onlinedocs.microchip.com/oxy/GUID-3475A0DC-0448-48FB-9AAE-319A834637DE-en-US-3/GUID-AAFC9DFC-3F14-4C7A-B64F-3B3DAC7668A5.html
19. https://support.netally.com/kbhome/kbarticle/?id=e56b8e5c-b519-40dd-b964-f3c1a74fbdc4
20. https://www.intel.com/content/www/us/en/support/articles/000006999/wireless/legacy-intel-wireless-products.html