Examkin

Question

Difficulty: MediumAAA Framework Concepts (Authentication, Authorization, Accounting)

A network manager is evaluating centralized AAA protocols to secure network infrastructure devices and access points. Which TWO operational characteristics distinguish TACACS+ from RADIUS? (Select TWO.)

  1. TACACS+ encrypts the entire packet payload, whereas RADIUS encrypts only the password field.Answer
  2. TACACS+ separates Authentication and Authorization into distinct processes, allowing per-command authorization.Answer
  3. C
    TACACS+ operates over transport protocol UDP port 49 to reduce transmission overhead.
  4. D
    TACACS+ combines Authentication and Authorization within single request/response packet pairs.

Answer

TACACS+ encrypts the entire packet payload (rather than just the password field) and separates Authentication and Authorization into distinct processes to allow per-command authorization.
TACACS+ provides full-packet payload encryption (enhancing security for administrative traffic) and maintains modular separation of Authentication and Authorization (enabling per-command authorization policies).

Step-by-Step Solution

1
Identify payload encryption behavior for TACACS+ versus RADIUS.
TACACS+ encrypts the entire body of every packet, whereas RADIUS encrypts only the MD5-hashed password attribute.
Full-packet encryption in TACACS+ prevents unauthorized observers from reading usernames, authorization commands, and accounting logs.
2
Analyze functional decoupling of AAA pillars in TACACS+.
TACACS+ decouples authentication from authorization, enabling granular per-command control during administrative CLI sessions.
RADIUS binds authentication and authorization together in single packet exchanges, making per-command authorization impractical.

Key Concept

TACACS+ vs RADIUS Architectural and Security Differences
Rate this question

Topics

AAA Framework Concepts (Authentication, Authorization, Accounting)

More questions from this topic