Match each AAA authentication protocol or access control framework to its defining operational characteristic.
- TACACS+Encrypts the entire packet payload, operates over TCP port 49, and decouples authentication and authorization functions.
- RADIUSEncrypts only the password field, operates over UDP ports 1812 and 1813, and combines authentication and authorization.
- KerberosUses ticket-granting tokens and symmetric cryptography over port 88 to provide centralized single sign-on.
- IEEE 802.1XStandard for port-based network access control that encapsulates EAP frames over local area networks (EAPOL).
Cevap
TACACS+ matches full payload encryption over TCP port 49 with decoupled AAA; RADIUS matches password-only encryption over UDP ports 1812/1813 with combined authentication and authorization; Kerberos matches ticket-granting tokens over port 88 for single sign-on; IEEE 802.1X matches port-based access control encapsulating EAPOL.
Each protocol is accurately matched based on its transport protocol, default ports, encryption scope, and functional place in the AAA framework.
Adım Adım Çözüm
Anahtar Kavram
AAA Framework Operational Matrix (RADIUS, TACACS+, Kerberos, and 802.1X)