Examkin

Question

Difficulty: HardAAA Framework and Authentication Methods

A network security administrator is deploying a dual centralized AAA architecture to support both network infrastructure management and 802.1X wireless user authentication. Which TWO of the following statements accurately distinguish the operational and transport properties of TACACS+ and RADIUS in this implementation?

  1. TACACS+ encrypts the entire packet body following the header and operates over TCP port 49 for administrative sessions.Answer
  2. RADIUS encrypts only the password attribute in the payload and operates over UDP transport protocols.Answer
  3. C
    RADIUS encrypts the entire packet payload while separating authentication and authorization into decoupled services.
  4. D
    TACACS+ operates over UDP port 49 to minimize transport overhead during administrative command execution.

Answer

The correct statements are that TACACS+ encrypts the entire packet body following the header while operating over TCP port 49, and RADIUS encrypts only the password attribute in the payload while operating over UDP transport protocols.
TACACS+ encrypts the complete packet payload (excluding the TACACS+ header) and uses TCP port 49 for reliable connection-oriented administrative tracking. RADIUS combines authentication and authorization, encrypting only the password field within the Access-Request packet and using UDP for connectionless transport.

Step-by-Step Solution

1
Analyze TACACS+ transport and cryptographic boundaries
TACACS+ uses TCP port 49 and encrypts the entire packet body (payload), separating authentication, authorization, and accounting.
Administrative device management requires granular command authorization and reliable TCP connections.
2
Analyze RADIUS transport and cryptographic boundaries
RADIUS uses UDP (ports 1812/1813) and encrypts only the password attribute, combining authentication and authorization.
RADIUS is designed for high-throughput network access control where packet overhead is minimized.
3
Evaluate options against verified protocol characteristics
Identify the two accurate statements describing TACACS+ full payload encryption over TCP and RADIUS password-only encryption over UDP.
Matches the verified operational standards for both AAA protocols.

Key Concept

AAA Framework Protocol Differentiation (RADIUS vs. TACACS+)
Estimated Time:1m 30s
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic