300-715 · Question #175
What are two differences between the RADIUS and TACACS+ protocols? (Choose two.)
The correct answer is D. RADIUS combines authentication and authorization, whereas TACACS+ does not. E. TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813. RADIUS combines authentication and authorization, while TACACS+ separates them; also, TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.
Question
What are two differences between the RADIUS and TACACS+ protocols? (Choose two.)
Options
- ARADIUS offers multiprotocol support, whereas TACACS+ does not.
- BRADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol.
- CRADIUS enables encryption of all the packets, whereas with TACACS+, only the password is
- DRADIUS combines authentication and authorization, whereas TACACS+ does not.
- ETACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.
How the community answered
(48 responses)- A2% (1)
- B2% (1)
- C4% (2)
- D92% (44)
Why each option
RADIUS combines authentication and authorization, while TACACS+ separates them; also, TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.
RADIUS is generally considered to have less robust multiprotocol support and attribute extensibility compared to TACACS+, making this statement incorrect.
RADIUS is an open standard protocol defined by IETF RFCs, whereas TACACS+ is a Cisco proprietary protocol, making this statement incorrect and reversed.
RADIUS encrypts only the password within the packet, leaving other attributes in plain text. TACACS+ encrypts the entire payload of the TACACS+ packet, providing more comprehensive security; therefore, this statement is incorrect and reversed.
RADIUS typically combines authentication and authorization into a single packet exchange, meaning a user is authenticated and granted a specific level of access simultaneously. In contrast, TACACS+ strictly separates these functions, allowing for independent authentication, authorization, and accounting phases, which offers more granular control.
TACACS+ is a TCP-based protocol, using TCP port 49 for reliable communication. RADIUS is a UDP-based protocol, typically using UDP ports 1812 for authentication and 1813 for accounting, which makes it less reliable but potentially faster due to connectionless communication.
Concept tested: RADIUS vs TACACS+ Protocol Differences
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13849-tacacs-vs-radius.html
Topics
Community Discussion
No community discussion yet for this question.