300-715 · Question #288
What is the difference between how RADIUS and TACACS+ handle encryption?
The correct answer is B. RADIUS only encrypts the password field, whereas TACACS+ encrypts the entire packet. RADIUS encrypts only the password field, whereas TACACS+ encrypts the entire packet body, providing different levels of security for communication between client and server.
Question
What is the difference between how RADIUS and TACACS+ handle encryption?
Options
- ARADIUS encrypts only the username and password fields, whereas TACACS+ encrypts the entire
- BRADIUS only encrypts the password field, whereas TACACS+ encrypts the entire packet.
- CRADIUS encrypts the entire packet, whereas TACACS+ encrypts only the username and
- DRADIUS encrypts the entire packet, whereas TACACS+ only encrypts the password field.
How the community answered
(37 responses)- A3% (1)
- B92% (34)
- C5% (2)
Why each option
RADIUS encrypts only the password field, whereas TACACS+ encrypts the entire packet body, providing different levels of security for communication between client and server.
RADIUS does not encrypt the username field; only the password is encrypted.
RADIUS encrypts only the password attribute within the packet payload, leaving other details like the username unencrypted. In contrast, TACACS+ encrypts the entire body of the packet, ensuring comprehensive protection for all data exchanged, including authorization and accounting information, beyond just authentication credentials.
RADIUS does not encrypt the entire packet; TACACS+ encrypts the entire packet body.
RADIUS only encrypts the password, and TACACS+ encrypts the entire packet body, not just the password field.
Concept tested: RADIUS vs. TACACS+ encryption mechanisms
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-mt/sec-aaa-15-mt-book/sec-tacacs-vs-radius.html
Topics
Community Discussion
No community discussion yet for this question.