Examkin

Soru

Zorluk: OrtaAAA Framework Concepts (Authentication, Authorization, Accounting)

A network infrastructure team is selecting a centralized AAA protocol to secure administrative CLI access to enterprise switches. The security policy dictates that all communication between the network devices and the AAA server must have its entire packet payload encrypted, and the solution must support granular authorization for individual CLI commands. Which protocol satisfies these security requirements?

  1. TACACS+Cevap
  2. B
    RADIUS
  3. C
    802.1X
  4. D
    Local Authentication

Cevap

TACACS+ meets both requirements by encrypting the full packet body and separating authorization from authentication to permit command-level control.
TACACS+ is a AAA protocol operating over TCP port 49. It encrypts the entire body of the packet (all payload data beyond the TACACS+ header) and separates AAA functions, making it ideal for network device administration where granular per-command authorization is required.

Adım Adım Çözüm

1
Analyze the payload encryption requirement.
Full-packet payload encryption is required. TACACS+ encrypts the entire body of the packet, whereas RADIUS only encrypts the password attribute.
Security policy specifies full-packet encryption rather than selective field encryption.
2
Analyze the command authorization requirement.
Granular command-level authorization is required. TACACS+ separates authentication, authorization, and accounting, allowing individual command checks. RADIUS combines authentication and authorization into single attribute-value pairs.
Separation of AAA functions is necessary for per-command authorization.

Anahtar Kavram

TACACS+ vs RADIUS AAA protocol features and encryption mechanisms
Bu soruyu puanla

Konular

AAA Framework Concepts (Authentication, Authorization, Accounting)

Bu konudan daha fazla soru