Examkin

Question

Difficulty: EasyAAA Framework and Authentication Methods

Match each authentication protocol or security standard to its core operational characteristic.

  • RADIUSCombines authentication and authorization, operating over UDP and encrypting only the user password field.
  • TACACS+Separates AAA functions, operates over TCP port 49, and encrypts the entire packet payload.
  • KerberosUses ticket-granting tokens and key distribution centers to provide secure mutual authentication in domain networks.
  • 802.1XEnforces port-based network access control to authenticate endpoints before granting switch or wireless network access.

Answer

RADIUS matches with combining authentication and authorization while encrypting only passwords over UDP; TACACS+ matches with separating AAA services and encrypting the full payload over TCP port 49; Kerberos matches with using ticket-granting tokens for mutual authentication; 802.1X matches with providing port-based network access control.
Each term is correctly matched according to its underlying transport protocol, encryption scope, AAA architecture, or access control mechanism.

Step-by-Step Solution

1
Identify the protocol that combines authentication/authorization and encrypts passwords over UDP.
RADIUS matches this operational profile.
RADIUS uses UDP ports 1812/1813 and obscures only the password payload.
2
Identify the protocol that separates all AAA pillars and encrypts the full payload over TCP port 49.
TACACS+ matches this operational profile.
TACACS+ operates over TCP port 49 and encrypts the entire packet body following the header.
3
Identify the authentication system based on tickets and mutual authentication.
Kerberos matches this operational profile.
Kerberos uses Ticket Granting Services to authenticate clients without transmitting passwords over the network.
4
Identify the standard responsible for port-based network authentication.
802.1X matches this operational profile.
802.1X blocks unauthorized network traffic at Layer 2 until credentials are confirmed by an authentication server.

Key Concept

AAA Framework and Authentication Methods
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic