Question

Difficulty: HardAAA Framework Concepts (Authentication, Authorization, Accounting)

A network operations team is auditing access control protocols used across enterprise routers and switches. When comparing TACACS+ and RADIUS protocol implementations, which TWO functional characteristics belong specifically to TACACS+? (Select TWO.)

  1. It utilizes TCP port 49 and encrypts the entire payload of the packet.Answer
  2. It completely separates authentication and authorization into independent operational processes.Answer
  3. C
    It utilizes UDP transport and encrypts only the user password field within the packet.
  4. D
    It combines authentication and authorization into a single unified protocol exchange.

Answer

The two correct functional characteristics of TACACS+ are that it utilizes TCP port 49 while encrypting the entire packet payload, and it completely separates authentication and authorization into independent operational processes.
TACACS+ is primarily engineered for administrative device access control. It uses TCP port 49 and provides full-packet payload encryption. Furthermore, TACACS+ strictly separates the authentication, authorization, and accounting functions, which permits network administrators to implement granular command-level authorization policies independently of user authentication.

Step-by-Step Solution

1
Analyze transport layer behavior and security mechanics for TACACS+.
TACACS+ uses TCP port 49 and encrypts the entire payload.
TACACS+ relies on connection-oriented TCP for reliable communication and encrypts all packet payload data beyond the header.
2
Evaluate functional separation within the AAA architecture for TACACS+.
TACACS+ decouples authentication, authorization, and accounting.
Separating authorization from authentication enables precise, per-command CLI access control during device administration sessions.

Key Concept

TACACS+ vs RADIUS Protocol Architecture and Operational Mechanics
Estimated Time:2m 0s
Rate this question