nerdexam
Cisco

300-715 · Question #226

Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)

The correct answer is C. EAP E. MSCHAPV2. EAP and MSCHAPv2 are authentication protocols supported by RADIUS for various client authentication scenarios but are not supported by TACACS+.

Policy Enforcement

Question

Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)

Options

  • AMSCHAPv1
  • BPAP
  • CEAP
  • DCHAP
  • EMSCHAPV2

How the community answered

(49 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    88% (43)
  • D
    4% (2)

Why each option

EAP and MSCHAPv2 are authentication protocols supported by RADIUS for various client authentication scenarios but are not supported by TACACS+.

AMSCHAPv1

MSCHAPv1, an older Microsoft challenge-handshake authentication protocol, is generally supported by both RADIUS and TACACS+, or at least simpler CHAP variants are.

BPAP
CEAPCorrect

EAP (Extensible Authentication Protocol) is a flexible framework that allows multiple authentication methods to be used over it, and it is a core protocol supported by RADIUS for robust client authentication, which TACACS+ does not support.

DCHAP
EMSCHAPV2Correct

MSCHAPv2 is a secure, challenge-response authentication protocol widely used within EAP methods (like PEAP, EAP-TTLS) and is fully supported by RADIUS, whereas TACACS+ lacks support for this protocol.

Concept tested: RADIUS vs. TACACS+ authentication protocol support

Source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-734170.html

Topics

#RADIUS#TACACS+#Authentication Protocols#EAP#MSCHAPv2

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice