200-301 · Question #745
Which two statements correctly describe RADIUS? (Choose two)
The correct answer is C. It encrypts only the password D. It combines authentication and authorization. This question asks for two accurate descriptions of the RADIUS protocol.
Question
Options
- AIt separates authentication, authorization, and accounting functions
- BIt uses TCP as its transport protocol
- CIt encrypts only the password
- DIt combines authentication and authorization
- EI can authorize specific router commands
How the community answered
(47 responses)- A6% (3)
- B2% (1)
- C87% (41)
- E4% (2)
Why each option
This question asks for two accurate descriptions of the RADIUS protocol.
RADIUS combines authentication and authorization, and while it supports accounting, it does not separate all three AAA functions as distinctly as TACACS+.
RADIUS uses UDP (User Datagram Protocol) as its transport protocol, typically on ports 1812/1813 or 1645/1646, not TCP.
RADIUS encrypts only the password within the Access-Request packets, leaving other attributes like the username unencrypted.
RADIUS combines the authentication and authorization functions into a single process, where the RADIUS server's response includes both authentication success/failure and any associated authorization attributes.
RADIUS has limited capabilities for granular command authorization on network devices, a feature where TACACS+ typically excels.
Concept tested: RADIUS protocol characteristics
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a1-chap-1.html
Topics
Community Discussion
No community discussion yet for this question.