What advantage does 802.1X/EAP-TLS have over an IPSec/ESP VPN as an 802.11 WLAN security solution?

A.
EAP-TLS is supports fast/secure roaming in an 802.11 RSN.

B.
EAP-TLS protects the client’s username and password inside an encrypted tunnel, but IPSec does not.

C.
EAP-TLS is based on HTTPS, allowing Layer 2 encryption keys to be exchanged inside a secure tunnel.

D.
A data frame protected with EAP-TLS encryption has two privacy fields in the header, providing two layers of security.