Examkin

Question

Difficulty: EasyAAA Framework and Authentication Methods

A network administrator needs to centralize administrative access for network switches using an authentication protocol that encrypts the entire packet payload. Which protocol best satisfies this requirement?

  1. TACACS+Answer
  2. B
    RADIUS
  3. C
    SNMPv3
  4. D
    Kerberos

Answer

TACACS+ is the correct protocol because it encrypts the full body (payload) of each packet during administration sessions.
TACACS+ encrypts the entire packet body following the header, providing full confidentiality for administrative sessions and commands.

Step-by-Step Solution

1
Analyze the requirement for full packet payload encryption during device administration.
Identify that RADIUS only encrypts the password attribute, whereas TACACS+ encrypts the entire packet body.
Security requirements specifying complete command and credential payload privacy necessitate TACACS+ over RADIUS.
2
Select the protocol matching full payload encryption.
Choose TACACS+.
TACACS+ uses TCP port 49 and provides full payload encryption.

Key Concept

RADIUS vs TACACS+ Payload Encryption Boundaries
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic