Which statement about EAP is true?

• A. EAP is a standalone authentication mechanism
• B. EAP is a framework that supports multiple authentication methods
• C. EAP only works with RADIUS
• D. EAP has no messaging protocol

Answer: (B)

EAP is a framework that allows different authentication methods to be used under one umbrella during network access. Rather than being a single authentication mechanism, it enables the client and server to negotiate and use various methods such as EAP-TLS (certificate-based), EAP-PEAP, or EAP-FAST. This flexibility is what makes the statement true: EAP isn’t tied to one method, it provides the structure for many methods to operate.

It’s also not limited to a specific backend; while servers like RADIUS or Diameter can carry and process EAP authentication, EAP itself is independent of any single backend. And yes, there is a defined messaging exchange for EAP (and related protocols like EAPOL for LAN), which handles the request/response dialogue between the peer and the server.