nerdexam
CompTIA

220-1102 · Question #744

A technician needs to implement a system to handle both authentication and authorization. Which of the following meets this requirement?

The correct answer is C. TACACS+. TACACS+ is a robust AAA protocol that provides separate authentication and authorization services, commonly used for managing access to network devices and services.

Security

Question

A technician needs to implement a system to handle both authentication and authorization. Which of the following meets this requirement?

Options

  • AWPA3
  • BMFA
  • CTACACS+
  • DOAuth 2.0

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    88% (36)
  • D
    5% (2)

Why each option

TACACS+ is a robust AAA protocol that provides separate authentication and authorization services, commonly used for managing access to network devices and services.

AWPA3

WPA3 (Wi-Fi Protected Access 3) is a security standard for wireless networks, primarily focused on encryption and authentication for Wi-Fi access, not general system authentication and authorization.

BMFA

MFA (Multi-Factor Authentication) is an authentication method requiring multiple verification factors, but it is not a standalone system for both authentication and authorization.

CTACACS+Correct

TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco proprietary protocol that provides distinct authentication and authorization services, allowing granular control over what a user can do after authenticating. It encrypts the entire packet and uses TCP, making it a reliable solution for managing user access to network infrastructure.

DOAuth 2.0

OAuth 2.0 is an authorization framework allowing third-party applications limited access to an HTTP service, but it does not provide authentication itself and is not a complete AAA system.

Concept tested: AAA protocols for network access

Source: https://www.cisco.com/c/en/us/products/collateral/security/secure-access-control-system/prod_qas0900aecd805b53e7.html

Topics

#Authentication#Authorization#TACACS+#Security Protocols

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice