Examkin

Question

Difficulty: EasyAAA Framework Concepts (Authentication, Authorization, Accounting)

A network administrator is evaluating AAA protocols to manage CLI access to enterprise routers. Which feature is a key characteristic of TACACS+ compared to RADIUS?

  1. It encrypts the entire packet body during transmission.Answer
  2. B
    It encrypts only the password field within the packet payload.
  3. C
    It combines authentication and authorization into a single process.
  4. D
    It uses UDP port 1812 for authentication and port 1813 for accounting.

Answer

TACACS+ encrypts the entire body of the packet during transmission.
TACACS+ encrypts the entire body of the packet, providing complete confidentiality for usernames, commands, and authorization details. In contrast, RADIUS encrypts only the password field.

Step-by-Step Solution

1
Identify the protocol characteristics of TACACS+.
TACACS+ is an administrative AAA protocol that operates over TCP port 49.
Understanding transport protocol mechanics and encryption features is fundamental when comparing TACACS+ and RADIUS.
2
Compare TACACS+ encryption mechanisms against RADIUS.
TACACS+ encrypts the entire packet payload (everything following the header), whereas RADIUS encrypts only the password attribute.
This structural difference ensures TACACS+ provides full-payload confidentiality for network device administration sessions.

Key Concept

TACACS+ vs. RADIUS AAA Protocol Differences
Estimated Time:45s
Rate this question

Topics

AAA Framework Concepts (Authentication, Authorization, Accounting)

More questions from this topic