Which statement describes two$-$way authentication as used by $802\mathrm{.}1$X$/$PEAP$?$

The authentication$-$server sends its digital certificate as unencrypted cleartext to the supplicant for validation.

The supplicant sends a username$/$password in an encrypted tunnel for verification.

The supplicant uses the CA public key to validate the digital certificate sent by the authenticator.

The authentication$-$server validates the username$/$password sent by the supplicant.

The supplicant uses the CA private key to validate the digital certificate sent by the authentication$-$server.

The authentication$-$server validates the username$/$password sent by the supplicant.

The authentication$-$server sends its digital certificate inside an encrypted tunnel to the supplicant for validation.

The supplicant sends a username$/$password in an encrypted tunnel for verification.