300-715 · Question #226
Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)
The correct answer is C. EAP E. MSCHAPV2. EAP and MSCHAPv2 are authentication protocols supported by RADIUS for various client authentication scenarios but are not supported by TACACS+.
Question
Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)
Options
- AMSCHAPv1
- BPAP
- CEAP
- DCHAP
- EMSCHAPV2
How the community answered
(49 responses)- A6% (3)
- B2% (1)
- C88% (43)
- D4% (2)
Why each option
EAP and MSCHAPv2 are authentication protocols supported by RADIUS for various client authentication scenarios but are not supported by TACACS+.
MSCHAPv1, an older Microsoft challenge-handshake authentication protocol, is generally supported by both RADIUS and TACACS+, or at least simpler CHAP variants are.
EAP (Extensible Authentication Protocol) is a flexible framework that allows multiple authentication methods to be used over it, and it is a core protocol supported by RADIUS for robust client authentication, which TACACS+ does not support.
MSCHAPv2 is a secure, challenge-response authentication protocol widely used within EAP methods (like PEAP, EAP-TTLS) and is fully supported by RADIUS, whereas TACACS+ lacks support for this protocol.
Concept tested: RADIUS vs. TACACS+ authentication protocol support
Source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-734170.html
Topics
Community Discussion
No community discussion yet for this question.