300-715 Question #235: Real Exam Question with Answer & Explanation

The correct answer is D: TACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password.. TACACS+ encrypts the entire packet payload for enhanced security, while RADIUS encrypts only the password attribute within the packet.

Network Access Device Administration

Question

What is a difference between TACACS+ and RADIUS in regards to encryption?

Options

ATACACS+ encrypts only the password, whereas RADIUS encrypts the username and password.
BTACACS+ encrypts the username and password, whereas RADIUS encrypts only the password.
CTACACS+ encrypts the password, whereas RADIUS sends the entire packet in clear text.
DTACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password.

Explanation

TACACS+ encrypts the entire packet payload for enhanced security, while RADIUS encrypts only the password attribute within the packet.

Common mistakes.

A. This statement is incorrect; TACACS+ encrypts the entire packet, not just the password, and RADIUS encrypts only the password, not the username.
B. This statement is incorrect; TACACS+ encrypts the entire packet, and RADIUS encrypts only the password, not the username.
C. This statement is incorrect; RADIUS does encrypt the password attribute, it does not send the entire packet in clear text.

Concept tested. TACACS+ vs RADIUS encryption differences

Reference. https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/12438-25.html

Topics

#TACACS+#RADIUS#Encryption#Authentication Protocols

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice Browse All 300-715 Questions