According to WLAN security design best practices, what is true of the EAP properties shown in the exhibit?

A.
The “Validate server certificate” checkbox should be checked if you purchased a third-party SSL
certificate for the AS, but left unchecked if you have a self-signed certificate for the AS.

B.
The “Validate server certificate” checkbox should always be checked to prevent MITM attacks from
rogue authentication servers.

C.
The “Trusted Root Certification Authorities” list is provided to identify the certificate that the client should
send to the AS for client authentication.

D.
The “Do not prompt user to authorize new servers or trusted certification authorities” box should be
checked only for administrative users.

E.
The “Enable Identity Privacy” checkbox and anonymous name field are only useful for networks
supporting EAP-LEAP.