Two universities are making their 802.11n wireless networks available to the other university’s students. The
infrastructure will pass the student’s credentials back to the home school for authentication via the Internet. The
requirements are:
Mutual authentication of clients and authentication server The design should not limit connection speeds
Authentication must be delegated to the home school No passwords should be sent unencrypted
The following design was implemented:
WPA2 Enterprise using EAP-PEAP-MSCHAPv2 will be used for wireless security RADIUS proxy servers will be
used to forward authentication requests to the home school The RADIUS servers will have certificates from a
common public certificate authority A strong shared secret will be used for RADIUS server authentication
Which of the following security considerations should be added to the design?
A.
The transport layer between the RADIUS servers should be secured
B.
WPA Enterprise should be used to decrease the network overhead
C.
The RADIUS servers should have local accounts for the visiting students
D.
Students should be given certificates to use for authentication to the network