Examkin

Soru

Zorluk: OrtaAAA Framework and Authentication Methods

A network security administrator is organizing the organization's access control architecture. Match each authentication protocol or framework to its correct operational characteristic and transport mechanism.

  • RADIUSCombines authentication and authorization into one process, encrypts only the user password, and operates over UDP ports 1812/1813.
  • TACACS+Decouples AAA functions into separate processes, encrypts the entire packet payload, and operates over TCP port 49.
  • IEEE 802.1XActs as a port-based network access control framework encapsulating Extensible Authentication Protocol (EAP) messages between client and switch.
  • KerberosUses a Key Distribution Center (KDC) to issue Ticket-Granting Tickets (TGTs) for single sign-on across trusted domains over port 88.

Cevap

RADIUS matches with partial packet encryption over UDP 1812/1813; TACACS+ matches with full payload encryption over TCP 49; IEEE 802.1X matches with the port-based EAP encapsulation framework; Kerberos matches with KDC and Ticket-Granting Ticket issuance over port 88.
Each protocol correctly aligns with its architectural design: RADIUS provides combined authentication/authorization with UDP transport (1812/1813) encrypting passwords; TACACS+ separates AAA services using TCP 49 with full payload encryption; 802.1X serves as the Layer 2 EAP port-based access framework; and Kerberos relies on a KDC for TGT issuance over port 88.

Adım Adım Çözüm

1
Analyze transport protocols and encryption scope for remote user vs. device access protocols.
RADIUS uses UDP ports 1812/1813 and encrypts only the password, whereas TACACS+ uses TCP port 49 and encrypts the entire payload.
RADIUS was designed for broad client network access and user dial-in/VPN connection tracking, while TACACS+ was designed for granular network infrastructure management.
2
Evaluate port-based access control and local ticket-based network authentication protocols.
IEEE 802.1X defines port control using EAP encapsulation, while Kerberos provides ticket-granting ticket authentication via a Key Distribution Center.
802.1X prevents unauthenticated devices from connecting to physical switch ports or wireless access points, while Kerberos manages identity access tickets across domain resources.

Anahtar Kavram

Centralized AAA Frameworks, Port-Based Network Access Control, and Protocol Characteristics
Bu soruyu puanla

Konular

AAA Framework and Authentication Methods

Bu konudan daha fazla soru