Examkin

Question

Difficulty: Very hardAuthentication, Authorization, and Accounting (AAA)

A network security administrator is auditing the Centralized Access Management setup for core network switches using RADIUS and TACACS+ protocols. The audit aims to verify proper alignment with the Authentication, Authorization, and Accounting (AAA) framework. Which of the following statements correctly describe AAA operational characteristics in this deployment? (Select TWO.)

  1. TACACS+ decouples authentication and authorization, enabling granular, per-command authorization checks after identity is established.Answer
  2. Accounting mechanisms capture command execution logs and session timestamps to establish non-repudiation and forensic traceability.Answer
  3. C
    RADIUS encrypts the entire packet payload, whereas TACACS+ encrypts only the password field during the authentication exchange.
  4. D
    Assigning network privilege levels and dynamic VLAN memberships occurs during the authentication phase prior to credential validation.

Answer

TACACS+ decouples authentication and authorization, enabling granular, per-command authorization checks after identity is established; and Accounting mechanisms capture command execution logs and session timestamps to establish non-repudiation and forensic traceability.
The statements emphasizing TACACS+ decoupled AAA architecture for per-command authorization and accounting's role in recording audit logs for non-repudiation are correct. TACACS+ separates authentication from authorization, allowing granular command authorization per user session. Accounting tracks user activities and resource usage after access is granted.

Step-by-Step Solution

1
Analyze the AAA phase definitions and protocol implementations for RADIUS and TACACS+.
Identify that authentication verifies identity, authorization enforces permissions (like TACACS+ per-command authorization), and accounting records activity.
AAA requires clear functional separation between proving identity, granting permissions, and logging events.
2
Evaluate protocol-specific architecture regarding AAA coupling and packet encryption.
Confirm that TACACS+ separates AAA services and encrypts the entire body, unlike RADIUS which combines authentication and authorization while only encrypting passwords.
Protocol design dictates how granular access controls and payload protections are applied.

Key Concept

Authentication, Authorization, and Accounting (AAA) Protocol Architecture
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic