Examkin

Question

Difficulty: MediumAAA Framework Concepts (Authentication, Authorization, Accounting)

A system administrator is configuring an authentication server to support 802.1X wireless client access across campus switch stacks. Which operational characteristic of RADIUS makes it the primary protocol choice for this network access scenario compared to TACACS+?

  1. It combines authentication and authorization into a single protocol process while encrypting only the user password.Answer
  2. B
    It utilizes TCP port 49 to ensure connection-oriented delivery of authorization messages.
  3. C
    It decouples authentication, authorization, and accounting into distinct independent services for granular per-command control.
  4. D
    It encrypts the entire packet payload including the packet header for maximum security across untrusted networks.

Answer

RADIUS combines authentication and authorization into a single protocol exchange and encrypts only the password field, making it the industry standard for 802.1X network access control.
The correct answer accurately identifies key attributes of RADIUS: it combines authentication and authorization into a unified exchange and encrypts only the password attribute in the request body. This combined model is optimized for network access control applications like 802.1X.

Step-by-Step Solution

1
Analyze the scenario requirement
The requirement focuses on 802.1X network access control for wireless clients and switch ports.
802.1X architectures rely heavily on RADIUS because network access decisions (Authentication and Authorization) occur simultaneously upon connection.
2
Compare RADIUS functional mechanics with TACACS+
RADIUS operates via UDP (ports 1812/1813), combines authentication and authorization into single transactions, and encrypts only the password attribute.
TACACS+ uses TCP port 49, separates AAA processes independently (allowing per-command authorization for administrator CLI access), and encrypts the entire packet body.
3
Identify the correct option describing RADIUS behavior
Combining authentication and authorization while encrypting only the password is the defining operational behavior of RADIUS.
This functional pairing aligns directly with network access control standards like 802.1X.

Key Concept

RADIUS vs TACACS+ Protocol Architectural Differences
Rate this question

Topics

AAA Framework Concepts (Authentication, Authorization, Accounting)

More questions from this topic