200-301 · Question #694
Which three options are benefits of using TACACS+ on a device? (Choose three)
The correct answer is C. device-administration packets are encrypted in their entirely. E. It allows the users to be authenticated against a remote server. F. It supports access-level authorization for commands.. TACACS+ enhances device security by providing centralized authentication, granular command authorization, and full encryption of administrative traffic.
Question
Which three options are benefits of using TACACS+ on a device? (Choose three)
Options
- AIt ensures that user activity is untraceable
- BIt provides a secure accounting facility on the device.
- Cdevice-administration packets are encrypted in their entirely.
- DIt allows the user to remotely access devices from other vendors.
- EIt allows the users to be authenticated against a remote server.
- FIt supports access-level authorization for commands.
How the community answered
(58 responses)- A3% (2)
- B2% (1)
- C90% (52)
- D5% (3)
Why each option
TACACS+ enhances device security by providing centralized authentication, granular command authorization, and full encryption of administrative traffic.
TACACS+ provides accounting, meaning user activity is traceable and logged, not untraceable.
While TACACS+ provides a secure accounting facility, the primary accounting records are typically kept on the central TACACS+ server, not directly 'on the device' itself.
TACACS+ encrypts the entire body of the packet, including authentication, authorization, and accounting information, making device administration more secure against eavesdropping and ensuring confidentiality of administrative data.
TACACS+ is an open standard, but its primary function is AAA, not enabling remote access to devices from other vendors in a special way that other protocols don't.
TACACS+ centralizes user authentication against a remote server (e.g., an AAA server), which allows for consistent policy enforcement and simplified user management across multiple network devices, rather than relying on local user databases.
TACACS+ provides granular authorization capabilities, allowing administrators to define specific commands or command sets that users are permitted to execute, based on their roles or privileges, offering precise control over device access.
Concept tested: TACACS+ features and benefits
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_aaa/configuration/xe-3s/sec-aaa-xe-3s-book/sec-tacacs.html
Topics
Community Discussion
No community discussion yet for this question.