220-1002 Question #694: Real Exam Question with Answer & Explanation

The correct answer is D: TACACS. TACACS+ (Terminal Access Controller Access Control System Plus) is specifically designed for granular, per-command authorization, making it ideal for controlling exactly which commands a user can execute on network devices like routers and switches. Unlike RADIUS, which bundles a

Question

Which of the following allows for per-command authentication and authorization?

Options

ATKIP
BRADIUS
CAES
DTACACS

Explanation

TACACS+ (Terminal Access Controller Access Control System Plus) is specifically designed for granular, per-command authorization, making it ideal for controlling exactly which commands a user can execute on network devices like routers and switches. Unlike RADIUS, which bundles authentication and authorization together, TACACS+ separates all three AAA functions (Authentication, Authorization, Accounting) and encrypts the entire communication payload. TKIP and AES are encryption protocols, not authentication or authorization frameworks.

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice