350-701 Practice Question: Which EAP method used with 802.1X provides…

Which EAP method used with 802.1X provides certificate-based mutual authentication and is commonly used with Cisco ISE?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

EAP-TLS

EAP-TLS uses certificates for both client and server authentication, providing strong security.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
EAP-TLS
Why this is correct
EAP-TLS uses certificates for mutual authentication.
✗
EAP-MD5
Why it's wrong here
EAP-MD5 only provides one-way authentication and is not secure.
✗
EAP-FAST
Why it's wrong here
EAP-FAST uses a PAC, not necessarily certificates.
✗
EAP-GTC
Why it's wrong here
EAP-GTC is a generic token card method, not certificate-based.

Quick reference

Protocol	Port(s)	Encryption	Transport	Primary Use
RADIUS	1812 / 1813	Password only	UDP	Network access control
TACACS+	49	Full packet	TCP	Device administration
Diameter	3868	Full session	TCP / SCTP	Carrier / mobile networks
802.1X	—	EAP-based	Layer 2	Port-based access control

TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.

Go deeper