300-715 · Question #235
What is a difference between TACACS+ and RADIUS in regards to encryption?
The correct answer is D. TACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password. TACACS+ encrypts the entire packet payload for enhanced security, while RADIUS encrypts only the password attribute within the packet.
Question
What is a difference between TACACS+ and RADIUS in regards to encryption?
Options
- ATACACS+ encrypts only the password, whereas RADIUS encrypts the username and password.
- BTACACS+ encrypts the username and password, whereas RADIUS encrypts only the password.
- CTACACS+ encrypts the password, whereas RADIUS sends the entire packet in clear text.
- DTACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password.
How the community answered
(33 responses)- A6% (2)
- C3% (1)
- D91% (30)
Why each option
TACACS+ encrypts the entire packet payload for enhanced security, while RADIUS encrypts only the password attribute within the packet.
This statement is incorrect; TACACS+ encrypts the entire packet, not just the password, and RADIUS encrypts only the password, not the username.
This statement is incorrect; TACACS+ encrypts the entire packet, and RADIUS encrypts only the password, not the username.
This statement is incorrect; RADIUS does encrypt the password attribute, it does not send the entire packet in clear text.
TACACS+ encrypts the entire AAA packet payload, including all header information and attribute-value pairs, providing comprehensive protection for all transmitted data. In contrast, RADIUS encrypts only the password attribute, leaving other sensitive information like usernames and authorization details potentially exposed.
Concept tested: TACACS+ vs RADIUS encryption differences
Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/12438-25.html
Topics
Community Discussion
No community discussion yet for this question.