Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?

The correct answer is B. TACACS+. Authentication and Authorization RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization. TACACS+ uses the AAA archi

Submitted by luis.pe· Mar 5, 2026Security Fundamentals

Question

Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?

Options

ARADIUS
BTACACS+
C802.1X
DKerberos

How the community answered

(27 responses)

A
7% (2)
B
89% (24)
C
4% (1)

Explanation

Authentication and Authorization RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization. TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. For example, with TACACS+, it is possible to use Kerberos authentication and TACACS+ authorization and accounting. After a NAS authenticates on a Kerberos server, it requests authorization information from a TACACS+ server without having to re-authenticate. The NAS informs the TACACS+ server that it has successfully authenticated on a Kerberos server, and the server then provides authorization information.

Topics

#TACACS+#AAA#authorization#authentication separation

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice