300-425 Question 312
Single answerAn organization is configuring device access controls for its Cisco wireless network. The goal is to centralize authentication and authorization for administrators accessing wireless controllers. Which protocol should be implemented to securely provide both authentication and authorization while providing detailed command-level controls?
- A
RADIUS
- B
TACACS+
- C
LDAP
- D
SNMP
Show answer and explanation
Correct answer: B
Explanation
TACACS+ is the preferred protocol for device access control in this scenario because it provides centralized authentication and authorization with detailed command-level control for managing administrator access to wireless controllers. This makes it more suitable than RADIUS, LDAP, or SNMP for securing administrative actions on network devices.
- A. Incorrect.
RADIUS provides authentication, authorization, and accounting (AAA) for network access, but it lacks granular command-level control for administrative actions, making it less suited for device management in this scenario.
- B. Correct.
TACACS+ is designed for device administration and allows granular command-level controls, along with secure authentication and authorization, making it the best choice for this use case.
- C. Incorrect.
LDAP is primarily used for directory services and user authentication but does not support granular command-level authorization or accounting for device administration.
- D. Incorrect.
SNMP is used for network monitoring and management, not for authentication or authorization of administrative access to devices.