200-301 Question 247
Select 2An organization is deploying a cloud-managed network with centralized authentication for administrators to access their cloud-based dashboard. The organization wants to log all authentication attempts and ensure that commands executed by administrators are authorized and logged. Which protocol(s) should they implement to meet these requirements?
- A
TACACS+ for command authorization and logging
- B
RADIUS for user authentication and accounting
- C
TACACS+ for user authentication and command authorization
- D
RADIUS for command authorization and logging
- E
TACACS+ and RADIUS together for improved flexibility
Show answer and explanation
Correct answers: A, B
Explanation
To meet the organization's requirements, TACACS+ should be used for detailed command authorization and logging, while RADIUS can be used for user authentication and accounting. The combination of both protocols ensures centralized authentication while maintaining granular control over administrative actions and logging.
- A. Correct.
TACACS+ is designed for detailed command authorization and logging, making it ideal for this scenario. It separates authentication, authorization, and accounting, giving granular control over administrative actions.
- B. Correct.
RADIUS is well-suited for user authentication and accounting but lacks the granular command authorization capabilities of TACACS+.
- C. Incorrect.
While TACACS+ can handle both user authentication and command authorization, using RADIUS alongside it provides additional integration options with cloud services and is a more flexible approach.
- D. Incorrect.
RADIUS is not designed for command authorization and logging. It is used primarily for user authentication and accounting.
- E. Incorrect.
Combining TACACS+ and RADIUS provides the advantages of both protocols: TACACS+ for command-level control and RADIUS for user authentication and integration with cloud-managed systems.