Examkin

Soru

Zorluk: OrtaAAA Framework Concepts (Authentication, Authorization, Accounting)

A network manager is evaluating centralized AAA protocols to secure network infrastructure devices and access points. Which TWO operational characteristics distinguish TACACS+ from RADIUS? (Select TWO.)

  1. TACACS+ encrypts the entire packet payload, whereas RADIUS encrypts only the password field.Cevap
  2. TACACS+ separates Authentication and Authorization into distinct processes, allowing per-command authorization.Cevap
  3. C
    TACACS+ operates over transport protocol UDP port 49 to reduce transmission overhead.
  4. D
    TACACS+ combines Authentication and Authorization within single request/response packet pairs.

Cevap

TACACS+ encrypts the entire packet payload (rather than just the password field) and separates Authentication and Authorization into distinct processes to allow per-command authorization.
TACACS+ provides full-packet payload encryption (enhancing security for administrative traffic) and maintains modular separation of Authentication and Authorization (enabling per-command authorization policies).

Adım Adım Çözüm

1
Identify payload encryption behavior for TACACS+ versus RADIUS.
TACACS+ encrypts the entire body of every packet, whereas RADIUS encrypts only the MD5-hashed password attribute.
Full-packet encryption in TACACS+ prevents unauthorized observers from reading usernames, authorization commands, and accounting logs.
2
Analyze functional decoupling of AAA pillars in TACACS+.
TACACS+ decouples authentication from authorization, enabling granular per-command control during administrative CLI sessions.
RADIUS binds authentication and authorization together in single packet exchanges, making per-command authorization impractical.

Anahtar Kavram

TACACS+ vs RADIUS Architectural and Security Differences
Bu soruyu puanla

Konular

AAA Framework Concepts (Authentication, Authorization, Accounting)

Bu konudan daha fazla soru