Examkin

Question

Difficulty: EasyIdentity and Access Management Architecture

A security administration team needs to centralize management for administrative console logins across enterprise network routers and switches. The architectural requirements specify that authentication must be decoupled from authorization to enforce granular per-command permissions, and the entire transmission packet body must be encrypted. Which protocol should the team implement?

  1. Terminal Access Controller Access-Control System Plus (TACACS+)Answer
  2. B
    Remote Authentication Dial-In User Service (RADIUS)
  3. C
    Lightweight Directory Access Protocol (LDAP)
  4. D
    Network Perimeter Access Control Lists (ACLs)

Answer

Terminal Access Controller Access-Control System Plus (TACACS+) is the correct protocol as it encrypts the full packet payload and completely separates authentication and authorization operations.
Terminal Access Controller Access-Control System Plus (TACACS+) fulfills all architectural criteria by encrypting the full payload of every packet and modularizing AAA functions, allowing administrators to restrict and audit specific commands executed on network hardware.

Step-by-Step Solution

1
Analyze the technical requirements in the stem
Identified two primary requirements: full packet encryption and separation of authentication from command-level authorization for administrative network access.
Selecting an appropriate IAM architecture protocol requires matching key operational features to explicit requirements.
2
Compare protocol capabilities against security requirements
TACACS+ uses TCP port 49, encrypts all packet contents after the header, and separates AAA functions. RADIUS uses UDP, encrypts only passwords, and combines authentication with authorization.
Determines which AAA architectural protocol fulfills both granular authorization and packet protection specifications.

Key Concept

TACACS+ vs RADIUS Architecture in Device Management
Estimated Time:45s
Rate this question

Topics

Identity and Access Management Architecture

More questions from this topic