Which two statements are correct? $($Choose two.$)$

EAP is authentication protocol that uses client and server$-$side certificates for authentication

EAP is a transport mechanism to carry arbitrary authentication protocol

EAP only runs over IEEE $802\mathrm{.}3$ wired media