When authenticating wireless clients through PEAPv0 with MS-CHAPv2, which statement is
correct?

A.
Authentication credentials are exchanged inside a TLS tunnel.

B.
The client must trust the RADIUS server certificate.

C.
The same certification authority must issue both the client and server certificates.

D.
The CN attribute of the RADIUS server certificate must contain the FQDN or the IP address of
the RADIUS server itself.

E.
A self-signed RADIUS server certificate cannot be used.