A network operations team is auditing access control protocols used across enterprise routers and switches. When comparing TACACS+ and RADIUS protocol implementations, which TWO functional characteristics belong specifically to TACACS+? (Select TWO.)
- It utilizes TCP port 49 and encrypts the entire payload of the packet.Answer
- It completely separates authentication and authorization into independent operational processes.Answer
- CIt utilizes UDP transport and encrypts only the user password field within the packet.
- DIt combines authentication and authorization into a single unified protocol exchange.
Answer
The two correct functional characteristics of TACACS+ are that it utilizes TCP port 49 while encrypting the entire packet payload, and it completely separates authentication and authorization into independent operational processes.
TACACS+ is primarily engineered for administrative device access control. It uses TCP port 49 and provides full-packet payload encryption. Furthermore, TACACS+ strictly separates the authentication, authorization, and accounting functions, which permits network administrators to implement granular command-level authorization policies independently of user authentication.
Step-by-Step Solution
Key Concept
TACACS+ vs RADIUS Protocol Architecture and Operational Mechanics
Estimated Time:2m 0s