An administrator wants to configure network device administration and is trying to decide whether to use TACACS+ or RADIUS. A reliable protocol must be used that can check command authorization…

The correct answer is A. TACACS+ because it runs over TCP. TACACS+ is the correct protocol for network device administration requiring command authorization. It uses TCP port 49, which provides a reliable, connection-oriented transport - meaning packet delivery is guaranteed and errors are detected. This is important for administrative…

Network Access Device Administration

Question

An administrator wants to configure network device administration and is trying to decide whether to use TACACS+ or RADIUS. A reliable protocol must be used that can check command authorization. Which protocol meets these requirements and why?

Options

ATACACS+ because it runs over TCP
BRADIUS because it runs over UDP
CRADIUS because it runs over TCP.
DTACACS+ because it runs over UDP

How the community answered

(32 responses)

A
94% (30)
B
3% (1)
D
3% (1)

Explanation

TACACS+ is the correct protocol for network device administration requiring command authorization. It uses TCP port 49, which provides a reliable, connection-oriented transport - meaning packet delivery is guaranteed and errors are detected. This is important for administrative sessions where lost packets could cause inconsistent command authorization results. Additionally, TACACS+ separates the Authentication, Authorization, and Accounting functions, allowing granular per-command authorization checks. RADIUS uses UDP (B, D), which is connectionless and less reliable, and it combines authentication and authorization, making per-command authorization difficult to implement. Options C is factually incorrect - RADIUS runs over UDP, not TCP.

Topics

#TACACS+#RADIUS#AAA#Network Device Administration

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice