Question

Difficulty: EasyIdentity and Access Management Operations

A security administrator is reviewing identity and access management protocol configurations for network infrastructure management. When evaluating TACACS+ against RADIUS for central administrative access control, which of the following operational characteristics are specific to TACACS+? (Select TWO.)

  1. It encrypts the entire body of the communication packet.Answer
  2. It separates authentication and authorization services into distinct operational processes.Answer
  3. C
    It combines authentication and authorization into a single unified transaction.
  4. D
    It relies on network perimeter placement to implicitly trust administrative connections.

Answer

TACACS+ encrypts the entire body of the packet and separates authentication and authorization services into distinct operational processes.
TACACS+ is designed for administrative device management. It encrypts the complete body of every packet exchanged between the client and server and strictly separates authentication and authorization operations, enabling granular control over administrative commands.

Step-by-Step Solution

1
Analyze protocol encryption scope for administrative access.
Identify that TACACS+ encrypts the entire payload of the packet during transmission.
Full packet payload encryption protects credentials and sensitive commands from eavesdropping.
2
Evaluate AAA architecture modularity.
Determine that TACACS+ separates authentication and authorization into modular functions.
Separating AAA functions enables granular authorization controls on individual administrative commands.

Key Concept

TACACS+ Protocol Operational Characteristics
Rate this question