Examkin

Question

Difficulty: MediumAAA Framework and Authentication Methods

Match each AAA protocol or network authentication framework to its corresponding operational characteristic.

  • TACACS+Encrypts the entire packet payload over TCP port 49 and separates AAA functions into distinct services.
  • RADIUSEncrypts only the password field over UDP ports 1812/1813 and combines authentication and authorization.
  • KerberosUtilizes a Ticket Granting Service (TGS) and symmetric cryptography for mutual authentication on trusted networks.
  • IEEE 802.1XActs as a Layer 2 port-based network access control framework that encapsulates Extensible Authentication Protocol (EAP) frames.

Answer

TACACS+ matches with whole-payload TCP encryption and separated AAA functions; RADIUS matches with UDP password-only encryption and combined auth/authz; Kerberos matches with ticket-granting service mutual authentication; and IEEE 802.1X matches with Layer 2 EAP-based port access control.
Each authentication solution corresponds directly to its architectural features: TACACS+ delivers connection-oriented TCP administration with complete payload encryption and granular AAA separation; RADIUS operates over UDP with password-only encryption; Kerberos enforces ticket-granting mutual authentication; and IEEE 802.1X serves as a Layer 2 port-level access framework utilizing EAP encapsulation.

Step-by-Step Solution

1
Analyze TACACS+ operational properties
Identify TACACS+ characteristics: TCP port 49, full packet payload encryption, modular separation of AAA functions.
TACACS+ is primarily used for network device administration, allowing granular authorization of individual command-line instructions.
2
Analyze RADIUS operational properties
Identify RADIUS characteristics: UDP transport (ports 1812/1813), password-only obfuscation, combined authentication and authorization response.
RADIUS is designed for wide-scale user network access, such as VPNs and wireless authentications, leaving headers and attribute-value pairs unencrypted.
3
Analyze Kerberos operational properties
Identify Kerberos characteristics: Key Distribution Center (KDC), Ticket Granting Service (TGS), ticket-based single sign-on (SSO).
Kerberos authenticates identity across enterprise directory services (such as Active Directory) through symmetric session keys.
4
Analyze IEEE 802.1X operational properties
Identify IEEE 802.1X characteristics: Layer 2 port control, EAP encapsulation (EAPoL), supplicant-authenticator-server architecture.
802.1X prevents unauthorized endpoints from passing network traffic through a switch port or wireless access point until validated.

Key Concept

AAA Protocols and Authentication Framework Mechanics
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic