300-430 Question 311
Single answerA network administrator is configuring device access controls for a Cisco wireless network. The requirements include centralizing authentication management for network devices and ensuring that commands executed by administrators are logged. Which access control protocol should the administrator configure to meet these requirements?
- A
RADIUS
- B
TACACS+
- C
LDAP
- D
802.1X
Show answer and explanation
Correct answer: B
Explanation
TACACS+ is specifically designed for device access control and management, offering features like per-command authorization and detailed logging of administrative actions. This makes it the best protocol for scenarios where centralized management of device access and command logging is required.
- A. Incorrect.
RADIUS is primarily used for authentication and authorization for network access (e.g., wireless or VPN) but does not provide granular control over command logging or device-level management, making it less suitable for this requirement.
- B. Correct.
TACACS+ is designed for device access control, providing centralized authentication, authorization for command execution, and logging capabilities, making it the ideal choice for this scenario.
- C. Incorrect.
LDAP is used for directory services and is not designed for device access control or command logging in network devices.
- D. Incorrect.
802.1X is a port-based access control protocol used for authenticating devices on the network, not for managing device-level access or command logging.