220-1002 · Question #450
Which of the following uses a remote access server to forward a user's logon password to an authentication server, allowing or denying access to a system?
The correct answer is C. TACACS. TACACS is an AAA protocol that uses a remote access server to forward user login credentials to a centralized authentication server, which then permits or denies system access. It separates the access device from the authentication decision-making logic.
Question
Which of the following uses a remote access server to forward a user's logon password to an authentication server, allowing or denying access to a system?
Options
- AWPA2-PSK
- BAES
- CTACACS
- DTKIP
How the community answered
(29 responses)- B3% (1)
- C93% (27)
- D3% (1)
Why each option
TACACS is an AAA protocol that uses a remote access server to forward user login credentials to a centralized authentication server, which then permits or denies system access. It separates the access device from the authentication decision-making logic.
WPA2-PSK is a Wi-Fi authentication mode where all wireless clients share a single pre-shared key; it does not involve a remote access server forwarding credentials to a separate authentication server.
AES (Advanced Encryption Standard) is a symmetric block cipher algorithm used for data encryption; it is not an authentication protocol and performs no user credential validation or access control functions.
TACACS (Terminal Access Controller Access-Control System) and its successor TACACS+ operate by having a network access server receive a user's login credentials and forward them to a dedicated TACACS authentication server over the network. The authentication server validates the credentials against its database and returns an allow or deny response, enabling centralized access control for multiple network devices without storing credentials locally on each device.
TKIP (Temporal Key Integrity Protocol) is a Wi-Fi data encryption protocol used in WPA networks; it handles encryption of wireless frames and does not perform user authentication or credential forwarding.
Concept tested: TACACS remote authentication server protocol
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/13838-tacacs-aaa.html
Topics
Community Discussion
No community discussion yet for this question.