When a new EAP authentication is added, software has to be changed on the ________.

• A. authenticator
• B. central authentication server
• C. Both A and B
• D. Neither A nor B

Answer: (B)

In EAP-based authentication, the actual method logic is implemented on the central authentication server, while the authenticator (like a wireless AP or switch) simply forwards EAP messages between the client and the server. When you add a new EAP method, the server must understand and implement that method, handle its challenges, and verify credentials. The authenticator doesn’t implement the EAP type itself, it just passes the frames along, so it doesn’t require a full software change to support the new method. Therefore, updating the central authentication server is the necessary step needed to support the new EAP method.