Examkin

Question

Difficulty: MediumAAA Framework and Authentication Methods

A network technician captures packet traces while troubleshooting administrative access logs on core routers. The trace analysis reveals that the authentication protocol operates over UDP, encrypts only the password field within packets, and combines authentication and authorization procedures into single exchange pairs. Which security protocol is actively in use for this centralized access control system?

  1. RADIUSAnswer
  2. B
    TACACS+
  3. C
    Kerberos
  4. D
    LDAP

Answer

RADIUS is the security protocol currently in use.
The scenario describes RADIUS because RADIUS relies on UDP (typically ports 1812 and 1813), encrypts only the password attribute within the packet, and combines authentication and authorization into single packet transactions.

Step-by-Step Solution

1
Analyze transport protocol characteristics
The packet trace shows connectionless UDP transport.
RADIUS utilizes UDP (standard ports 1812 for authentication/authorization and 1813 for accounting), whereas TACACS+ uses reliable TCP (port 49).
2
Evaluate payload encryption scope
Only the password field is encrypted.
RADIUS encrypts only the password attribute inside Access-Request packets, leaving the rest of the packet header unencrypted. TACACS+ encrypts the entire packet body.
3
Examine AAA functional coupling
Authentication and authorization are combined.
RADIUS combines authentication and authorization within the same packet exchange, unlike TACACS+ which decouples AAA functions.

Key Concept

RADIUS vs TACACS+ Protocol Architecture and Operational Characteristics
Estimated Time:1m 0s
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic