Examkin

Question

Difficulty: MediumAAA Framework and Authentication Methods

A security operations team requires a centralized AAA solution for managing network device administrative sessions. The requirements specify that authentication and authorization functions must be separated to allow granular command-level authorization, and the entire packet payload between the switch and AAA server must be encrypted. Which protocol and transport layer combination meets these security requirements?

  1. TACACS+ using TCP port 49Answer
  2. B
    RADIUS using UDP ports 1812 and 1813
  3. C
    TACACS+ using UDP port 49
  4. D
    RADIUS using TCP port 1812

Answer

TACACS+ using TCP port 49
TACACS+ is designed for network device management because it decouples authentication and authorization, permitting per-command authorization policies. It also encrypts the entire packet body (everything past the header) and utilizes connection-oriented TCP port 49 for reliable transport.

Step-by-Step Solution

1
Evaluate protocol payload encryption and AAA modularity features
TACACS+ decouples authentication and authorization (enabling command-by-command authorization) and encrypts the entire payload following the TACACS+ header
RADIUS combines authentication and authorization and only encrypts the password field in Access-Request packets
2
Identify transport protocol and standard port association
TACACS+ uses TCP port 49 for reliable connection delivery
UDP is employed by RADIUS (ports 1812 and 1813), whereas TACACS+ relies on TCP

Key Concept

AAA Protocol Architectural Differences (TACACS+ vs RADIUS)
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic