200-301 Question 249
Single answerA cloud-managed organization wants to implement centralized authentication for its network devices using a protocol that supports command-by-command authorization and detailed accounting logs. They are also considering integration with their existing cloud services for easier management. Which protocol should they choose, and why?
- A
TACACS+ because it provides granular command authorization and detailed accounting.
- B
RADIUS because it supports detailed command authorization and integrates well with cloud services.
- C
RADIUS because it is designed for network device management with robust accounting features.
- D
TACACS+ because it integrates seamlessly with cloud services and provides basic authentication features.
Show answer and explanation
Correct answer: A
Explanation
The organization’s requirement for command-by-command authorization and detailed accounting logs makes TACACS+ the ideal protocol. Unlike RADIUS, which is better suited for user authentication and access control, TACACS+ is specifically designed for network device management and administrative control, offering the required level of granularity and logging. This makes TACACS+ the correct answer for this scenario.
- A. Correct.
TACACS+ is the correct choice here because it supports granular command-by-command authorization and detailed accounting logs, which is specifically suited for network device management and administrative control.
- B. Incorrect.
RADIUS does not support granular command-by-command authorization, as it was designed mainly for user authentication and access, not administrative control. While RADIUS integrates well with cloud services, it is not the best fit for this scenario’s requirements.
- C. Incorrect.
Although RADIUS has strong accounting features, it lacks the necessary granular command authorization capabilities for network device management as outlined in the scenario.
- D. Incorrect.
TACACS+ does not integrate seamlessly with cloud services, but it does provide detailed authentication, authorization, and accounting features. However, the focus here is on command granularity and centralized control, which makes this explanation incorrect.