In 802.11i, ________ authentication always uses SSL/TLS.

• A. inner
• B. outer
• C. Both A and B
• D. Neither A nor B

Answer: (B)

In 802.11i, when using EAP-based access, the authentication process is split into two stages: an outer authentication that establishes a protected TLS (SSL) tunnel between the client and the authentication server, and an inner authentication that takes place inside that tunnel using a specific EAP method. The TLS tunnel is created by the outer authentication, so it always uses SSL/TLS. The inner authentication occurs inside the secured channel and may use various EAP methods, not guaranteed to be TLS on its own. Therefore, the statement points to the outer authentication as the one that always uses SSL/TLS.