Examkin

Soru

Zorluk: Çok zorAAA Framework and Authentication Methods

A network security architect is reviewing the deployment of centralized authentication protocols across a global enterprise network infrastructure. The architecture requires separate handling for administrative access to network edge routers and user authentication for 802.1X wireless access. Which TWO of the following statements correctly evaluate the operational and security characteristics of RADIUS and TACACS+ in this deployment?

  1. TACACS+ decouples authentication, authorization, and accounting, allowing granular command-by-command authorization rules for administrative device management over TCP port 49.Cevap
  2. B
    RADIUS encrypts the entire packet payload, including the header and attributes, making it preferable for securing administrative command execution over TCP port 1812.
  3. RADIUS combines authentication and authorization into a single functional framework, utilizing UDP transport for network access control such as 802.1X enterprise Wi-Fi.Cevap
  4. D
    TACACS+ uses UDP port 49 to achieve low-latency connectionless transport while combining authentication and accounting into unified exchange packets.

Cevap

The correct statements are that TACACS+ decouples AAA functions for granular administrative command authorization over TCP port 49, and RADIUS combines authentication/authorization into a single framework using UDP transport for network access control.
TACACS+ is designed for administrative device management because it separates AAA components, allowing independent authorization of individual CLI commands, and uses TCP port 49 with full payload encryption. RADIUS is designed for network access control (such as 802.1X enterprise Wi-Fi), combining authentication and authorization responses while utilizing UDP ports 1812/1813.

Adım Adım Çözüm

1
Analyze AAA functional separation requirements
TACACS+ separates authentication, authorization, and accounting into distinct operations, enabling command-level authorization. RADIUS combines authentication and authorization in access-accept/reject responses.
Administrative device management requires granular command authorization, whereas network access control requires unified pass/fail authentication.
2
Evaluate transport layer protocols and port assignments
TACACS+ relies on TCP port 49 for reliable connection-oriented transport. RADIUS relies on UDP ports 1812 (authentication) and 1813 (accounting) for low-overhead packet delivery.
Transport protocol selection determines connection handling and port specifications in AAA deployment.
3
Verify encryption boundary characteristics
TACACS+ encrypts the entire body of the packet following the header, whereas RADIUS only encrypts the password attribute in the Access-Request packet.
Distinction in payload encryption is critical for evaluating security posture during administrative sessions versus user network access.

Anahtar Kavram

AAA Protocol Differentiation (RADIUS vs TACACS+)
Bu soruyu puanla

Konular

AAA Framework and Authentication Methods

Bu konudan daha fazla soru