nerdexam
Cisco

300-715 · Question #175

What are two differences between the RADIUS and TACACS+ protocols? (Choose two.)

The correct answer is D. RADIUS combines authentication and authorization, whereas TACACS+ does not. E. TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813. RADIUS combines authentication and authorization, while TACACS+ separates them; also, TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.

Network Access Device Administration

Question

What are two differences between the RADIUS and TACACS+ protocols? (Choose two.)

Options

  • ARADIUS offers multiprotocol support, whereas TACACS+ does not.
  • BRADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol.
  • CRADIUS enables encryption of all the packets, whereas with TACACS+, only the password is
  • DRADIUS combines authentication and authorization, whereas TACACS+ does not.
  • ETACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    4% (2)
  • D
    92% (44)

Why each option

RADIUS combines authentication and authorization, while TACACS+ separates them; also, TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.

ARADIUS offers multiprotocol support, whereas TACACS+ does not.

RADIUS is generally considered to have less robust multiprotocol support and attribute extensibility compared to TACACS+, making this statement incorrect.

BRADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol.

RADIUS is an open standard protocol defined by IETF RFCs, whereas TACACS+ is a Cisco proprietary protocol, making this statement incorrect and reversed.

CRADIUS enables encryption of all the packets, whereas with TACACS+, only the password is

RADIUS encrypts only the password within the packet, leaving other attributes in plain text. TACACS+ encrypts the entire payload of the TACACS+ packet, providing more comprehensive security; therefore, this statement is incorrect and reversed.

DRADIUS combines authentication and authorization, whereas TACACS+ does not.Correct

RADIUS typically combines authentication and authorization into a single packet exchange, meaning a user is authenticated and granted a specific level of access simultaneously. In contrast, TACACS+ strictly separates these functions, allowing for independent authentication, authorization, and accounting phases, which offers more granular control.

ETACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.Correct

TACACS+ is a TCP-based protocol, using TCP port 49 for reliable communication. RADIUS is a UDP-based protocol, typically using UDP ports 1812 for authentication and 1813 for accounting, which makes it less reliable but potentially faster due to connectionless communication.

Concept tested: RADIUS vs TACACS+ Protocol Differences

Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13849-tacacs-vs-radius.html

Topics

#RADIUS#TACACS+#AAA protocols#Protocol differences

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice