PEAP stands for Protected Extensible Authentication Protocol and is commonly used with TLS to secure credentials.

• A. PEAP stands for Protected Extensible Authentication Protocol and is commonly used with TLS to secure credentials
• B. PEAP is deprecated
• C. PEAP does not use TLS
• D. PEAP is only for wired networks

Answer: (A)

PEAP wraps an EAP conversation inside a TLS tunnel to protect credentials during authentication. The acronym stands for Protected Extensible Authentication Protocol, and the TLS layer provides server authentication and, optionally, client authentication via certificates. Once the secure tunnel is established, the inner EAP method carries the actual user credentials, so they are transmitted in encrypted form rather than in clear text. This is why the statement is correct: PEAP is designed to use TLS to secure the credentials during authentication, and it is commonly employed in wireless deployments (WPA-Enterprise, 802.1X) with a RADIUS backend. It is not deprecated; it does use TLS; and it is not limited to wired networks.