Examkin

Question

Difficulty: HardAAA Framework and Authentication Methods

A network engineer is inspecting packet captures during an audit of network management traffic. The captures show authentication and administration sessions between network switches and a central server communicating over TCP port 49, where the complete packet payload following the header is cryptographically encrypted. Which protocol is being observed, and which feature accurately reflects its architecture relative to RADIUS?

  1. TACACS+, which decouples authentication and authorization into distinct services while encrypting the entire message body.Answer
  2. B
    RADIUS, which decouples authentication and authorization into distinct services while encrypting the entire message body.
  3. C
    TACACS+, which combines authentication and authorization into a unified process and uses UDP port 49 for transport communication.
  4. D
    RADIUS, which operates over TCP port 49 to provide granular per-command authorization while encrypting only the user password.

Answer

TACACS+, which decouples authentication and authorization into distinct services while encrypting the entire message body.
The observed protocol is TACACS+ because it communicates over TCP port 49, encrypts the entire packet payload (excluding the header), and architecture-wise separates authentication and authorization, enabling detailed per-command administrative access controls.

Step-by-Step Solution

1
Identify the transport protocol and port number given in the packet capture scenario.
The traffic utilizes TCP port 49, which uniquely identifies TACACS+ (Terminal Access Controller Access-Control System Plus). RADIUS operates over UDP ports 1812 and 1813.
Port numbers and transport protocols differentiate AAA management protocols.
2
Analyze the encryption boundaries described in the capture.
The scenario notes that the entire packet payload is encrypted. TACACS+ encrypts the entire body of the packet, whereas RADIUS only encrypts the password attribute within the packet payload.
Understanding security boundaries helps distinguish AAA protocol characteristics.
3
Evaluate the architectural separation of AAA components.
TACACS+ modularly separates Authentication, Authorization, and Accounting into distinct functions, allowing granular command-level authorization. RADIUS combines authentication and authorization into a unified flow.
Determining the correct feature description confirms protocol behavior.

Key Concept

AAA Framework protocol differences between TACACS+ and RADIUS regarding transport protocols, encryption boundaries, and architectural modularity.
Estimated Time:1m 30s
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic