Examkin

Question

Difficulty: MediumAAA Framework Concepts (Authentication, Authorization, Accounting)

A network security technician is reviewing the AAA architecture for managing network switches. The design mandates that administrative command authorization must be handled independently from initial authentication, and all traffic between the network access server and the AAA server must encrypt the entire packet payload. Which protocol should be deployed to satisfy these security requirements?

  1. TACACS+Answer
  2. B
    RADIUS
  3. C
    802.1X
  4. D
    SNMPv3

Answer

TACACS+ is the correct choice because it decouples authentication from authorization and encrypts the entire packet payload between the client device and the server.
TACACS+ meets both criteria specified in the scenario. It completely separates authentication, authorization, and accounting functions—enabling granular per-command authorization—and encrypts the entire packet payload sent across the network.

Step-by-Step Solution

1
Analyze requirement 1: Separation of authentication and command authorization.
TACACS+ modularly separates authentication, authorization, and accounting, allowing granular command authorization per user. RADIUS combines authentication and authorization into one process.
Administrative device access requires strict per-command authorization separate from logging in.
2
Analyze requirement 2: Full packet payload encryption.
TACACS+ encrypts the entire body of the packet. RADIUS encrypts only the password attribute in the access-request packet.
Encrypting the entire body ensures usernames, commands, and operational parameters are protected across the network.

Key Concept

TACACS+ vs RADIUS protocol capabilities and functional separation in the AAA framework
Estimated Time:1m 0s
Rate this question

Topics

AAA Framework Concepts (Authentication, Authorization, Accounting)

More questions from this topic