350-401 Question 234
Select 3A network administrator is tasked with implementing secure access to network devices across an enterprise network. The administrator decides to configure TACACS+ for authentication and authorization. Which two benefits does TACACS+ provide over RADIUS in this scenario?
- A
TACACS+ encrypts the entire payload of authentication packets.
- B
TACACS+ separates authentication and authorization processes.
- C
TACACS+ operates over UDP for better performance.
- D
TACACS+ is an open standard protocol, widely used across vendors.
- E
TACACS+ provides granular command-level authorization.
Show answer and explanation
Correct answers: A, B, E
Explanation
TACACS+ is a Cisco proprietary protocol designed to enhance security and flexibility for device access control. Unlike RADIUS, it encrypts the entire payload of authentication packets, separates authentication and authorization processes, and provides granular command-level authorization. These features make it a preferred choice for securing access to enterprise network devices.
- A. Correct.
Correct: TACACS+ encrypts the entire payload of authentication packets, whereas RADIUS only encrypts the password field. This provides enhanced security for sensitive data.
- B. Correct.
Correct: TACACS+ separates authentication, authorization, and accounting processes, allowing for more granular control compared to RADIUS, which combines them.
- C. Incorrect.
Incorrect: TACACS+ operates over TCP, not UDP, ensuring reliable delivery of authentication and authorization data.
- D. Incorrect.
Incorrect: TACACS+ is a Cisco proprietary protocol, whereas RADIUS is an open standard protocol.
- E. Correct.
Correct: TACACS+ supports granular command-level authorization, enabling administrators to control user access to specific commands on network devices.