Examkin

Question

Difficulty: EasyAAA Framework and Authentication Methods

A network technician is configuring a centralized authentication protocol for remote access VPN clients. Which protocol encrypts only the password within the packet payload and operates over UDP?

  1. RADIUSAnswer
  2. B
    TACACS+
  3. C
    Diameter
  4. D
    Kerberos

Answer

RADIUS (Remote Authentication Dial-In User Service) is the protocol that encrypts only the password field and relies on UDP.
RADIUS (Remote Authentication Dial-In User Service) combines authentication and authorization into a single service, uses UDP for transport (ports 1812 and 1813), and encrypts only the user password within the packet payload.

Step-by-Step Solution

1
Identify the transport protocol requirement
The question specifies UDP as the transport protocol, ruling out protocols using TCP.
RADIUS utilizes UDP (ports 1812/1813), whereas TACACS+ utilizes TCP (port 49).
2
Evaluate payload encryption behavior
RADIUS encrypts only the password in the Access-Request packet payload, leaving the remainder of the header unencrypted.
TACACS+ encrypts the entire payload body, distinguishing it from RADIUS.

Key Concept

RADIUS vs TACACS+ Protocol Differences
Rate this question

Topics

AAA Framework and Authentication Methods

More questions from this topic