Examkin

Question

Difficulty: HardAAA Framework and Authentication Methods

Match each centralized authentication protocol or access control framework component to its corresponding transport layer behavior, encryption boundary, or operational function.

  • RADIUS ProtocolOperates over UDP ports 1812/1813 and encrypts only the password field within the packet body.
  • TACACS+ ProtocolOperates over TCP port 49 and encrypts the entire payload body of every transmission.
  • 802.1X SupplicantClient-side software component responsible for presenting credentials to the network access device.
  • EAP-TLS FrameworkAuthentication mechanism requiring mutual authentication using X.509 digital certificates on both client and server.

Answer

RADIUS Protocol pairs with UDP 1812/1813 password-only encryption; TACACS+ Protocol pairs with TCP port 49 full payload encryption; 802.1X Supplicant pairs with client-side software credential agent; EAP-TLS Framework pairs with mutual certificate-based authentication.
Each security protocol and architectural term is matched accurately according to its transport protocol layer, payload encryption scope, endpoint role, or cryptographic verification mechanism.

Step-by-Step Solution

1
Analyze transport protocols and security boundaries for AAA frameworks.
RADIUS uses UDP ports 1812/1813 and encrypts only the user password field. TACACS+ uses TCP port 49 and encrypts the entire packet payload.
Differentiating transport types (UDP vs TCP) and encryption scope is crucial for evaluating network authentication architecture security.
2
Identify roles within 802.1X network access control.
The Supplicant represents the client end-node software requesting access, whereas the switch or wireless access point functions as the Authenticator.
Establishing explicit boundaries between endpoint client software, access devices, and AAA backends defines the 802.1X topology.
3
Evaluate Extensible Authentication Protocol (EAP) variants.
EAP-TLS requires client-side and server-side PKI digital certificates to validate both parties.
EAP-TLS is distinct from password-based or outer-tunnel EAP methods due to its mandatory mutual certificate requirement.

Key Concept

Centralized AAA Framework mechanisms, protocol transport differences, and 802.1X/EAP architecture components
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic