nerdexam
Cisco

300-715 · Question #23

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two )

The correct answer is C. TACACS+ has command authorization, and RADIUS does not. E. TACACS+ encrypts the whole payload, and RADIUS encrypts only the password. TACACS+ offers superior security and granular control for device administration compared to RADIUS by encrypting the entire payload and providing command-level authorization.

Network Access Device Administration

Question

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two )

Options

  • ATACACS+ supports 802.1X, and RADIUS supports MAB
  • BTACACS+ uses UDP, and RADIUS uses TCP
  • CTACACS+ has command authorization, and RADIUS does not.
  • DTACACS+ provides the service type, and RADIUS does not
  • ETACACS+ encrypts the whole payload, and RADIUS encrypts only the password.

How the community answered

(31 responses)
  • B
    3% (1)
  • C
    90% (28)
  • D
    6% (2)

Why each option

TACACS+ offers superior security and granular control for device administration compared to RADIUS by encrypting the entire payload and providing command-level authorization.

ATACACS+ supports 802.1X, and RADIUS supports MAB

Both TACACS+ and RADIUS can support 802.1X and MAB, so the statement that TACACS+ supports 802.1X and RADIUS supports MAB as a differentiator is incorrect.

BTACACS+ uses UDP, and RADIUS uses TCP

TACACS+ uses TCP and RADIUS uses UDP, so the statement reverses the correct transport protocols.

CTACACS+ has command authorization, and RADIUS does not.Correct

TACACS+ provides distinct command authorization capabilities, allowing granular control over which commands an authenticated user can execute on network devices, a feature not natively available in RADIUS.

DTACACS+ provides the service type, and RADIUS does not

Both TACACS+ and RADIUS can provide service type information, although TACACS+ typically offers more granular attribute-value pairs for customization.

ETACACS+ encrypts the whole payload, and RADIUS encrypts only the password.Correct

TACACS+ encrypts the entire body of the packet, ensuring the confidentiality of all authentication, authorization, and accounting (AAA) information, whereas RADIUS encrypts only the password within the access-request packet.

Concept tested: TACACS+ vs. RADIUS features, encryption, authorization

Source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/white_paper_c11-736005.html

Topics

#TACACS+#RADIUS#Device Administration#AAA Protocols

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice