Examkin

Question

Difficulty: EasyAAA Framework and Authentication Methods

A network administrator wants to centralize administrative access to enterprise routers and switches. The administrator requires a security protocol that encrypts the entire packet payload—including all authentication details and command data—and utilizes TCP port 49 for reliable transport. Which protocol best satisfies these requirements?

  1. TACACS+Answer
  2. B
    RADIUS
  3. C
    Kerberos over UDP 49
  4. D
    LDAP over UDP 389

Answer

TACACS+ is the correct choice because it runs over TCP port 49 and encrypts the entire packet payload for network device management.
TACACS+ (Terminal Access Controller Access-Control System Plus) operates over TCP port 49 and encrypts the entire body of the packet, making it ideal for administrative device access.

Step-by-Step Solution

1
Identify the transport port and encryption characteristics requested in the scenario.
The requirement specifies TCP port 49 and complete payload encryption.
Security requirement audits evaluate transport reliability (TCP vs UDP) and data privacy boundaries.
2
Evaluate protocol feature differences between AAA protocols.
TACACS+ uses TCP port 49 and encrypts the entire packet payload. RADIUS uses UDP ports 1812/1813 and encrypts only the password.
Differentiating TACACS+ from RADIUS relies on understanding payload encryption scope and transport layer port numbers.

Key Concept

TACACS+ vs RADIUS protocol features and encryption boundaries
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic