300-430 Question 313
Single answerAn organization is implementing device access controls for their wireless network to ensure secure authentication for administrative access to wireless LAN controllers (WLCs). The organization wants to use a protocol that supports centralized authentication, authorization, and accounting, as well as encrypts the entire payload of the authentication process. Which protocol should they implement?
- A
RADIUS
- B
TACACS+
- C
LDAP
- D
Kerberos
Show answer and explanation
Correct answer: B
Explanation
TACACS+ is the best choice for device access control in this scenario because it provides centralized authentication, authorization, and accounting while encrypting the entire payload of the authentication process. This ensures that administrative access to wireless devices is secure and meets the organization's requirements.
- A. Incorrect.
RADIUS is a protocol widely used for centralized authentication and accounting. However, it only encrypts the password in the authentication process, not the entire payload, which makes it less secure compared to TACACS+ in this scenario.
- B. Correct.
TACACS+ is a protocol designed for secure centralized authentication, authorization, and accounting. Unlike RADIUS, it encrypts the entire payload during the authentication process, making it the preferred choice for administrative access control in this scenario.
- C. Incorrect.
LDAP is primarily used for directory services and user authentication but lacks the full accounting capabilities and encrypted payload features needed for secure administrative access in this scenario.
- D. Incorrect.
Kerberos is a protocol used primarily for mutual authentication and single sign-on but is not designed for the accounting or granular access control required in this scenario.