200-301 Question 246
Single answerYou are configuring a network for a cloud-managed environment and need to implement centralized authentication for administrators accessing network devices. The solution must support detailed command authorization and logging. Which protocol is most suitable for this requirement?
- A
TACACS+
- B
RADIUS
- C
LDAP
- D
Kerberos
Show answer and explanation
Correct answer: A
Explanation
TACACS+ is the optimal choice for centralized authentication in cloud-managed environments when managing network devices. It provides features like detailed command authorization and logging that are essential for administrator accountability and security. While RADIUS is another authentication protocol, it is better suited for scenarios like user authentication for network access rather than device administration.
- A. Correct.
TACACS+ is the most suitable protocol for this scenario as it is designed for centralized authentication, allowing detailed command authorization and logging. It is commonly used for device administration in network environments.
- B. Incorrect.
While RADIUS is a centralized authentication protocol, it is better suited for user access to network resources (e.g., VPN or wireless networks) rather than for device administration. It does not support detailed command authorization.
- C. Incorrect.
LDAP is a protocol for accessing and managing directory information but lacks built-in support for command authorization and logging. It is not ideal for network device administration.
- D. Incorrect.
Kerberos is primarily used for secure authentication in distributed systems but does not provide the detailed command authorization and logging required for this use case.