Examkin

Soru

Zorluk: Çok zorAAA Framework Concepts (Authentication, Authorization, Accounting)

A network security engineer analyzes packet traces captured during remote access sessions to network infrastructure and 802.1X wireless client authentications. Which TWO statements correctly describe the architectural and packet-level differences between TACACS+ and RADIUS operations?

  1. TACACS+ separates authentication and authorization into independent transaction pairs, whereas RADIUS combines authentication and authorization within its access-request and access-accept exchanges.Cevap
  2. B
    RADIUS encrypts the entire payload of every packet after the initial handshake, whereas TACACS+ encrypts only the user password field within the Access-Request frame.
  3. TACACS+ uses TCP port 49 to ensure reliable transport for fine-grained command-by-command authorization, whereas RADIUS relies on UDP ports 1812 and 1813 for authentication and accounting traffic.Cevap
  4. D
    TACACS+ binds accounting logs directly with authorization responses in a single packet, whereas RADIUS requires a distinct TCP connection for accounting data.

Cevap

The correct statements state that TACACS+ separates authentication and authorization into independent transactions while RADIUS combines them, and that TACACS+ operates over TCP port 49 while RADIUS uses UDP ports 1812 and 1813.
TACACS+ provides modular separation of authentication and authorization, enabling independent transaction pairs, and runs over TCP port 49 for reliable transmission. RADIUS bundles authentication and authorization together within single Access-Request/Accept exchanges and operates over UDP ports 1812 and 1813.

Adım Adım Çözüm

1
Analyze protocol architectural modularity for AAA functions.
Identify that TACACS+ decouples Authentication, Authorization, and Accounting into separate protocol flows, whereas RADIUS combines Authentication and Authorization into a unified Access-Request/Access-Accept exchange.
Modular functional separation allows granular per-command authorization in TACACS+.
2
Evaluate transport layer protocols and port assignments.
Confirm TACACS+ utilizes connection-oriented TCP over port 49, whereas RADIUS utilizes connectionless UDP ports 1812 (Authentication/Authorization) and 1813 (Accounting).
TCP provides session reliability required for administrative control, while UDP minimizes overhead for network access control.
3
Evaluate packet payload encryption mechanisms to reject false statements.
Recognize that TACACS+ encrypts the entire packet payload (excluding the header), while RADIUS encrypts only the password attribute in the Access-Request packet.
Misidentifying payload encryption scope is a common protocol confusion.

Anahtar Kavram

Operational and protocol mechanics distinguishing TACACS+ and RADIUS within the AAA framework.
Bu soruyu puanla

Konular

AAA Framework Concepts (Authentication, Authorization, Accounting)

Bu konudan daha fazla soru