300-715 · Question #230
What are two differences of TACACS+ compared to RADIUS? (Choose two.)
The correct answer is B. TACACS+ encrypts the full packet payload, whereas RADIUS only encrypts the password. D. TACACS+ uses a connection-oriented transport protocol, whereas RADIUS uses a. TACACS+ encrypts the entire packet payload and uses a connection-oriented transport protocol, distinguishing it from RADIUS which encrypts only the password and uses a connectionless protocol.
Question
What are two differences of TACACS+ compared to RADIUS? (Choose two.)
Options
- ATACACS+ uses a connectionless transport protocol, whereas RADIUS uses a connection-
- BTACACS+ encrypts the full packet payload, whereas RADIUS only encrypts the password.
- CTACACS+ only encrypts the password, whereas RADIUS encrypts the full packet payload.
- DTACACS+ uses a connection-oriented transport protocol, whereas RADIUS uses a
- ETACACS+ supports multiple sessions per user, whereas RADIUS supports one session per user.
How the community answered
(51 responses)- A2% (1)
- B94% (48)
- E4% (2)
Why each option
TACACS+ encrypts the entire packet payload and uses a connection-oriented transport protocol, distinguishing it from RADIUS which encrypts only the password and uses a connectionless protocol.
This statement is incorrect; TACACS+ uses connection-oriented TCP, and RADIUS uses connectionless UDP.
TACACS+ encrypts the entire body of the authentication, authorization, and accounting (AAA) packet, providing higher security for all transmitted information. In contrast, RADIUS encrypts only the password attribute within the packet, leaving other attributes potentially exposed.
This statement reverses the encryption characteristics; TACACS+ encrypts the full packet, not just the password, unlike RADIUS.
TACACS+ uses TCP (Transmission Control Protocol), which is a connection-oriented protocol ensuring reliable delivery and flow control for AAA messages. RADIUS uses UDP (User Datagram Protocol), a connectionless protocol, which is less reliable and requires the application layer to handle retransmissions.
Both RADIUS and TACACS+ can support multiple sessions per user; the primary difference is not about session limits but rather the protocols and encryption methods.
Concept tested: TACACS+ vs RADIUS protocol differences (encryption, transport)
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/12438-25.html
Topics
Community Discussion
No community discussion yet for this question.