A network security administrator is assessing the centralized access control deployment for an enterprise infrastructure. The administrator needs to evaluate the architectural and transport differences between RADIUS and TACACS+ protocols. Which of the following statements correctly distinguish TACACS+ from RADIUS? (Select TWO).
- TACACS+ encrypts the complete body of the transmission payload, whereas RADIUS encrypts only the user password attribute.Cevap
- TACACS+ decouples authentication, authorization, and accounting into distinct interactions, whereas RADIUS combines authentication and authorization into a single service exchange.Cevap
- CRADIUS relies on TCP port 49 to maintain persistent, connection-oriented sessions for administrative authentication.
- DTACACS+ uses connectionless UDP ports 1812 and 1813 to convey device management command authorization requests.
Cevap
The correct statements are that TACACS+ encrypts the complete packet payload while RADIUS encrypts only the password attribute, and TACACS+ decouples AAA functions whereas RADIUS combines authentication and authorization into a single exchange.
TACACS+ provides full-payload encryption past the header and modular separation of AAA functions, making it ideal for granular switch/router administration. RADIUS encrypts only the password attribute and combines authentication and authorization into unified transaction packets.
Adım Adım Çözüm
Anahtar Kavram
RADIUS vs TACACS+ Protocol Architecture and Security Boundaries