Extensible Authentication Protocol (EAP) is known for allowing multiple different authentication mechanisms. Which statement best reflects this?

• A. It uses a single fixed method for all authentications
• B. It allows for numerous different mechanisms of authentication
• C. It relies on usernames only
• D. It is deprecated in modern networks

Answer: (B)

EAP is an authentication framework that supports a variety of methods through a single, common exchange between the client and the network. It doesn’t lock you into one fixed method; instead, it negotiates or selects among many inner authentication methods, such as certificate-based EAP-TLS or password-based approaches like EAP-PEAP with MSCHAPv2. This extensible design lets networks choose the most appropriate method for their security needs and infrastructure.

That flexibility is what makes the statement correct. It isn’t restricted to a single method, it isn’t limited to usernames alone (different methods use certificates, tokens, or other credentials), and EAP remains a foundational, widely used approach in modern networks, even though specific methods may evolve over time.