Examkin

Question

Difficulty: MediumAAA Framework and Authentication Methods

Match each AAA authentication protocol or access control framework to its defining operational characteristic.

  • TACACS+Encrypts the entire packet payload, operates over TCP port 49, and decouples authentication and authorization functions.
  • RADIUSEncrypts only the password field, operates over UDP ports 1812 and 1813, and combines authentication and authorization.
  • KerberosUses ticket-granting tokens and symmetric cryptography over port 88 to provide centralized single sign-on.
  • IEEE 802.1XStandard for port-based network access control that encapsulates EAP frames over local area networks (EAPOL).

Answer

TACACS+ matches full payload encryption over TCP port 49 with decoupled AAA; RADIUS matches password-only encryption over UDP ports 1812/1813 with combined authentication and authorization; Kerberos matches ticket-granting tokens over port 88 for single sign-on; IEEE 802.1X matches port-based access control encapsulating EAPOL.
Each protocol is accurately matched based on its transport protocol, default ports, encryption scope, and functional place in the AAA framework.

Step-by-Step Solution

1
Analyze transport layer protocols and encryption boundaries for TACACS+ and RADIUS.
TACACS+ uses TCP 49 with full packet payload encryption and decoupled AAA. RADIUS uses UDP 1812/1813 with password-only encryption.
Differentiating AAA server protocols relies on transport mode (TCP vs UDP), encryption scope, and functional separation.
2
Identify the ticket-based SSO authentication protocol.
Kerberos uses Ticket-Granting Services and symmetric key cryptography operating over port 88.
Kerberos is designed for domain single sign-on rather than network device management or RADIUS/TACACS+ remote access.
3
Identify the port-based access control framework standard.
IEEE 802.1X provides switch and wireless AP port-based security using EAPOL frames.
802.1X acts as an architectural framework connecting supplicants, authenticators, and backend AAA servers.

Key Concept

AAA Framework Operational Matrix (RADIUS, TACACS+, Kerberos, and 802.1X)
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic