Examkin

Question

Difficulty: EasyAAA Framework and Authentication Methods

A network technician is configuring centralized authentication for a remote access VPN solution. The organization's security guidelines mandate using an open-standard protocol that encrypts only the password attribute inside access-request packets, leaving the remaining header information unencrypted. Which authentication protocol meets these specific requirements?

  1. RADIUSAnswer
  2. B
    TACACS+
  3. C
    Kerberos
  4. D
    LDAP

Answer

RADIUS is the open-standard AAA protocol that encrypts only the password within access packets.
Remote Authentication Dial-In User Service (RADIUS) is an open-standard AAA protocol commonly deployed for network access such as VPN connections and 802.1X. A defining operational characteristic of RADIUS is that it encrypts only the user password field in the Access-Request packet, leaving other information like the username visible in plaintext.

Step-by-Step Solution

1
Analyze the operational requirements provided in the scenario.
The requirement calls for an open-standard AAA protocol where encryption is limited strictly to the password attribute within access request packets.
Different AAA protocols apply distinct encryption boundaries to packet payloads.
2
Compare the encryption behaviors of network authentication protocols.
RADIUS encrypts only the user password field using MD5 while leaving the username and remaining header unencrypted. TACACS+ encrypts the entire payload body.
Identifying payload encryption boundaries distinguishes RADIUS from alternative AAA protocols.

Key Concept

RADIUS Payload Encryption Characteristics
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic