200-301 Question 248
Single answerA company is migrating its network infrastructure to a cloud-managed solution. They want to implement centralized authentication for both on-premises and cloud-managed devices. Which protocol(s) would be most suitable for this purpose, considering scalability, encryption, and detailed logging?
- A
TACACS+
- B
RADIUS
- C
LDAP
- D
Kerberos
Show answer and explanation
Correct answer: A
Explanation
TACACS+ is the most suitable protocol for centralized authentication in both on-premises and cloud-managed environments. It offers robust encryption, command-level logging, and granular control, making it ideal for managing network devices in a secure and scalable manner.
- A. Correct.
TACACS+ is well-suited for centralized authentication, providing granular control and detailed logging. It is commonly used in networking environments, offering robust encryption for all communications. It is ideal for both on-premises and cloud-managed solutions.
- B. Incorrect.
RADIUS is also used for centralized authentication, but it primarily focuses on authentication and accounting. However, it lacks the detailed command-level logging and granular control required for cloud-managed solutions.
- C. Incorrect.
LDAP is a lightweight directory protocol that is primarily used for directory services, not specifically for authentication and authorization in networking environments. It is less secure compared to TACACS+ and RADIUS for this use case.
- D. Incorrect.
Kerberos is primarily used for authentication in systems like Windows Active Directory but is not suitable for cloud-managed networking solutions or detailed logging of network device access.