Examkin

Soru

Zorluk: ZorAAA Framework and Authentication Methods

A network administrator is tasked with deploying a centralized AAA solution specifically for administrative CLI access to enterprise network switches. The security baseline mandates that all administrative command authorization details and session logs transmitted between the switches and the AAA server must have their entire packet payloads encrypted. Additionally, the authentication service must operate over a connection-oriented transport protocol to guarantee packet delivery. Which protocol and default port configuration should the administrator implement to meet these requirements?

  1. TACACS+ using TCP port 49Cevap
  2. B
    RADIUS using UDP port 1812
  3. C
    TACACS+ using UDP port 49
  4. D
    RADIUS using TCP port 1813

Cevap

TACACS+ using TCP port 49
TACACS+ (Terminal Access Controller Access-Control System Plus) separates Authentication, Authorization, and Accounting into distinct functions, encrypts the entire packet payload (beyond the header), and runs over TCP port 49. This makes it ideal for administrative device access control where full command encryption and connection reliability are mandatory.

Adım Adım Çözüm

1
Analyze transport protocol requirements
The requirement specifies a reliable, connection-oriented transport layer protocol, which points to TCP rather than connectionless UDP.
TCP guarantees delivered segments via acknowledgments, whereas UDP is connectionless and unacknowledged.
2
Evaluate payload encryption capabilities of AAA protocols
TACACS+ encrypts the complete packet payload (everything after the TACACS+ header), whereas RADIUS only encrypts the password attribute in Access-Request packets.
Full payload encryption protects sensitive authorization commands and accounting details in transit.
3
Map protocol to standard port numbers
TACACS+ operates over TCP port 49. RADIUS uses UDP ports 1812 (Authentication) and 1813 (Accounting) or legacy UDP 1645/1646.
Matching the correct protocol, transport protocol, and standard port identifier confirms the required configuration.

Anahtar Kavram

RADIUS vs TACACS+ Protocol Feature Differentiation & Transport Requirements
Bu soruyu puanla

Konular

AAA Framework and Authentication Methods

Bu konudan daha fazla soru