Examkin

Question

Difficulty: MediumAAA Framework and Authentication Methods

Match each authentication and access control protocol with its corresponding transport and security characteristics.

  • RADIUSOperates over UDP and encrypts only the user password in access requests, combining authentication and authorization.
  • TACACS+Operates over TCP port 49 and encrypts the entire packet payload while separating authentication, authorization, and accounting.
  • KerberosUses port 88 and relies on symmetric key cryptography with time-stamped tickets for single sign-on authentication.
  • 802.1XServes as an IEEE port-based framework that encapsulates EAP messages (EAPOL) between a client and a switch or access point.

Answer

RADIUS pairs with UDP transport and password-only encryption; TACACS+ pairs with TCP port 49 and full payload encryption; Kerberos pairs with port 88 and time-stamped ticketing; 802.1X pairs with EAPOL port-based framework encapsulation.
Each protocol maps directly to its specific network characteristics: RADIUS relies on UDP with password-only encryption; TACACS+ uses TCP port 49 with full payload encryption; Kerberos relies on time-stamped ticket granting over port 88; and 802.1X provides Layer 2 port-based access control via EAPOL encapsulation.

Step-by-Step Solution

1
Analyze transport and payload encryption features of RADIUS.
RADIUS operates on UDP ports 1812/1813 and encrypts only the password field within packets.
RADIUS was designed as a lightweight client/server network access protocol that combines authentication and authorization.
2
Analyze TACACS+ specifications.
TACACS+ operates over TCP port 49, encrypts the full payload, and separates AAA functions for granular command accounting and authorization.
TACACS+ provides high security for administrative access to network infrastructure.
3
Identify ticket-based single sign-on protocol characteristics.
Kerberos utilizes TCP/UDP port 88 and relies on Key Distribution Center (KDC) ticket granting and timestamp validation.
Kerberos avoids sending secrets over the network by issuing cryptographically signed tickets.
4
Identify port-based access control framework characteristics.
802.1X encapsulates Extensible Authentication Protocol over LAN (EAPOL) to authenticate endpoints at Layer 2.
802.1X regulates physical or wireless port connectivity before network privileges are granted.

Key Concept

AAA Framework Protocol and Transport Matrix Characteristics
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic