CREST Practitioner Security Analyst (CPSA) Practice

Which of the following is not an advantage of using EAP?

1. Supports multiple authentication methods

2. Utilizes a simple username/password scheme

3. Enables use of hardware-based authentication devices

4. Provides better security in wireless communications

The correct answer is: Utilizes a simple username/password scheme

The option regarding the use of a simple username/password scheme is identified correctly as not being an advantage of EAP (Extensible Authentication Protocol). EAP is designed to provide a framework for authentication that supports a variety of methods, including more complex and secure options than just basic username and password. This flexibility allows organizations to implement stronger security measures such as mutual authentication, certificates, and public key infrastructures that go far beyond what a simple username/password system can offer. While username/password schemes are commonly used, they do not leverage the security advantages that EAP can provide with its support for token-based, biometric, or hardware-based methods. This makes EAP a more sophisticated choice for secure environments, particularly in wireless communications, where the risk for interception is higher. Therefore, option B does not align with the core benefits associated with the capabilities that EAP brings to network authentication.