mediumMultiple ChoiceObjective-mapped
220-1201 Practice Question: A user complains that their laptop cannot connect…
A user complains that their laptop cannot connect to the company's wireless network, but other devices work fine. The network uses WPA2-Enterprise with 802.1X authentication. Which service is most likely misconfigured on the laptop?
⚠ Common exam trap
CompTIA often tests the distinction between authentication methods (PEAP vs. EAP-TLS) in 802.1X scenarios, and the trap here is that candidates mistakenly blame a server-side issue (like RADIUS being offline) when the problem is actually a client-side supplicant configuration mismatch.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 802.1X authentication method is set to PEAP instead of EAP-TLS.
WPA2-Enterprise with 802.1X authentication requires the laptop to use a supplicant configured with the correct EAP method that matches the RADIUS server. If the laptop is set to PEAP (which uses a username/password or certificate) but the network requires EAP-TLS (which mandates client certificates), authentication will fail, preventing the laptop from connecting even though other devices with the correct configuration work fine.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The DHCP server is out of addresses.
Why it's wrong here
If the DHCP server were exhausted of available IP addresses, new devices attempting to join the network would fail to obtain an IP configuration. This would manifest as a general inability for any new client, including this laptop, to connect and communicate on the network. However, since other devices are successfully connecting and operating, the DHCP server likely has available addresses and is functioning correctly, indicating the problem lies elsewhere.
- ✗
The DNS server address is incorrect.
Why it's wrong here
An incorrect DNS server address would primarily impact the laptop's ability to resolve domain names to IP addresses, such as when browsing websites or accessing network resources by name. While this would severely hinder internet and network usability, it would not prevent the laptop from successfully associating with a wireless access point or completing the initial 802.1X authentication process to establish a network connection. The laptop would still connect to the Wi-Fi, but then fail to access resources by name.
- ✗
The RADIUS server is offline.
Why it's wrong here
The RADIUS (Remote Authentication Dial-In User Service) server is a critical component in 802.1X enterprise networks, responsible for authenticating all client connection requests. If the RADIUS server were offline or unreachable, no devices attempting to connect to the network using 802.1X would be able to successfully authenticate. Since other devices are connecting without issue, the RADIUS server is clearly operational and processing authentication requests for those clients.
- ✓
The 802.1X authentication method is set to PEAP instead of EAP-TLS.
Why this is correct
802.1X authentication relies on Extensible Authentication Protocol (EAP) methods to define how credentials are exchanged and verified. If the network's access point or RADIUS server is configured to require EAP-TLS, which uses client-side digital certificates for authentication, but the laptop is configured for PEAP (Protected EAP), which typically uses username/password credentials within a TLS tunnel, a fundamental mismatch occurs. This discrepancy in the expected authentication mechanism will cause the specific laptop's authentication attempt to fail, even if other devices using the correct method connect successfully.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
Learn chapter
Laptop Hardware and Components
Key term
Laptop
A portable personal computer that integrates a display, keyboard, touchpad, battery, and internal components into a single clamshell device for mobile computing.
Key term
WPA2
WPA2 is a security protocol used to protect Wi-Fi networks by encrypting data transmitted between devices and the access point.
About these practice questions
One of 972 original 220-1201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.