Examkin

Soru

Zorluk: OrtaAAA Framework Concepts (Authentication, Authorization, Accounting)

An enterprise network engineering team is deploying AAA services across core routers and wireless LAN controllers. The design requires differentiating protocols used for CLI administrative access versus port-based network access control. Which TWO of the following statements correctly compare the operational characteristics of TACACS+ and RADIUS in this environment?

  1. RADIUS combines authentication and authorization into unified transaction packets, whereas TACACS+ decouples authentication, authorization, and accounting into distinct and independent processes.Cevap
  2. B
    TACACS+ relies on UDP port 49 for lightweight message transmission, whereas RADIUS relies on TCP port 1812 to guarantee connection-oriented transport.
  3. TACACS+ encrypts the entire body of the packet following the header, whereas RADIUS encrypts only the password field within the packet payload.Cevap
  4. D
    RADIUS is optimized for administrative CLI per-command authorization, whereas TACACS+ is primarily used for 802.1X port-based network client access control.

Cevap

The correct statements are that RADIUS combines authentication and authorization into unified transaction packets while TACACS+ decouples them into distinct processes, and TACACS+ encrypts the entire body of the packet following the header while RADIUS encrypts only the password field.
RADIUS integrates authentication and authorization into single transactions (Access-Request/Access-Accept), while TACACS+ decouples all three AAA elements. Additionally, TACACS+ encrypts the entire body of every packet following the header, whereas RADIUS leaves packet headers and non-password attributes unencrypted in transit.

Adım Adım Çözüm

1
Analyze protocol architecture and functional separation
Identify that RADIUS combines authentication and authorization, while TACACS+ separates AAA functions.
RADIUS sends authorization attributes inside authentication response packets (Access-Accept), whereas TACACS+ allows granular, separate authorization requests.
2
Evaluate transport layer protocols and port assignments
Verify transport protocols: TACACS+ uses TCP port 49; RADIUS uses UDP ports 1812 and 1813.
TACACS+ requires connection-oriented TCP reliability, whereas RADIUS uses connectionless UDP.
3
Examine packet payload encryption mechanisms
Determine packet encryption scope for both protocols.
TACACS+ encrypts the entire packet body following the header, protecting all AAA data, whereas RADIUS encrypts only the password attribute.

Anahtar Kavram

Operational differences between TACACS+ and RADIUS protocols within the AAA framework.
Bu soruyu puanla

Konular

AAA Framework Concepts (Authentication, Authorization, Accounting)

Bu konudan daha fazla soru