220-1002 · Question #836
Which of the following features allows for the separation of authentication, authorization, and accounting?
The correct answer is C. TACACS+. TACACS+ (Terminal Access Controller Access-Control System Plus) is the protocol specifically designed to separate the three AAA functions - Authentication, Authorization, and Accounting - into independent processes. This separation allows each function to be handled by…
Question
Which of the following features allows for the separation of authentication, authorization, and accounting?
Options
- AMFA
- BRADIUS
- CTACACS+
- DLDAP
How the community answered
(51 responses)- A2% (1)
- C92% (47)
- D6% (3)
Explanation
TACACS+ (Terminal Access Controller Access-Control System Plus) is the protocol specifically designed to separate the three AAA functions - Authentication, Authorization, and Accounting - into independent processes. This separation allows each function to be handled by different servers or policies, providing greater granularity and flexibility in network access control. RADIUS (B) also provides AAA services but combines authentication and authorization into a single process, making separation less clean. MFA (A) addresses only the authentication factor. LDAP (D) is a directory protocol used for authentication lookups but does not natively handle authorization or accounting. TACACS+ is the standard answer for 'separation of AAA' in CompTIA and Cisco certifications.
Topics
Community Discussion
No community discussion yet for this question.