Examkin

Soru

Zorluk: Çok zorAAA Framework Concepts (Authentication, Authorization, Accounting)

An enterprise network security team is designing an access control architecture for two distinct use cases: granular CLI command authorization with full packet encryption for network engineers managing infrastructure devices via SSH, and port-based 802.1X authentication for wireless clients where authentication and authorization must be evaluated together in a single protocol transaction. Which protocol deployment strategy correctly fulfills both technical requirements based on their underlying operational characteristics?

  1. Deploy TACACS+ over TCP port 49 for infrastructure management because it encrypts the entire packet body and separates AAA functions; deploy RADIUS over UDP ports 1812 and 1813 for 802.1X access control because it encrypts only the password field and combines authentication with authorization.Cevap
  2. B
    Deploy RADIUS over TCP port 49 for infrastructure management because it encrypts the full packet body and separates AAA functions; deploy TACACS+ over UDP ports 1812 and 1813 for 802.1X access control because it combines authentication with authorization.
  3. C
    Deploy TACACS+ over UDP ports 1812 and 1813 for infrastructure management because it provides full packet encryption; deploy RADIUS over TCP port 49 for 802.1X access control because it separates authentication and authorization for granular access control.
  4. D
    Deploy TACACS+ over TCP port 49 for infrastructure management because it encrypts only the password field; deploy RADIUS over UDP ports 1812 and 1813 for 802.1X access control because it encrypts the full packet payload and separates authorization from authentication.

Cevap

Deploy TACACS+ over TCP port 49 for infrastructure management because it encrypts the entire packet body and separates AAA functions; deploy RADIUS over UDP ports 1812 and 1813 for 802.1X access control because it encrypts only the password field and combines authentication with authorization.
The correct strategy specifies TACACS+ over TCP port 49 for infrastructure management and RADIUS over UDP ports 1812/1813 for 802.1X network access control. TACACS+ encrypts the entire packet payload and decouples the AAA pillars, making it ideal for command-level authorization during SSH administration sessions. RADIUS encrypts only the user password field and combines authentication and authorization into single Access-Accept messages, making it the industry standard for 802.1X client authentication.

Adım Adım Çözüm

1
Analyze device administration requirements
Device management requires per-command authorization and payload encryption for sensitive CLI interactions.
TACACS+ runs on TCP port 49, encrypts the entire packet body (providing confidentiality for command parameters), and strictly separates Authentication, Authorization, and Accounting, allowing dynamic per-command authorization checks.
2
Analyze 802.1X network access control requirements
Network access control requires combined authentication and authorization decisions for endpoint network admission.
RADIUS operates over UDP ports 1812 (authentication/authorization) and 1813 (accounting). It combines authentication and authorization into single Access-Request and Access-Accept/Reject transactions, while encrypting only the password attribute in the header.
3
Synthesize protocol selection
TACACS+ satisfies device administration; RADIUS satisfies 802.1X access control.
Matching TACACS+ (TCP 49, full encryption, modular AAA) with RADIUS (UDP 1812/1813, password-only encryption, coupled auth/assoc) fulfills all design criteria.

Anahtar Kavram

TACACS+ vs RADIUS Protocol Architecture and Operational Differences
Bu soruyu puanla

Konular

AAA Framework Concepts (Authentication, Authorization, Accounting)

Bu konudan daha fazla soru