nerdexam
Cisco

300-715 · Question #349

What is a difference between TACACS+ as compared to RADIUS from an AAA perspective?

The correct answer is A. TACACS+ separates AAA services, whereas RADIUS combines authentication and authorization. A key difference in AAA is that TACACS+ independently handles Authentication, Authorization, and Accounting services, while RADIUS combines Authentication and Authorization.

Network Access Device Administration

Question

What is a difference between TACACS+ as compared to RADIUS from an AAA perspective?

Options

  • ATACACS+ separates AAA services, whereas RADIUS combines authentication and authorization.
  • BTACACS+ combines all roles into a single privilege level, whereas RADIUS separates privilege
  • CTACACS+ supports only Cisco devices, whereas RADIUS supports any RADUIS-compatible
  • DTACACS+ supports only local authentication, whereas RADIUS supports remote authentication.

How the community answered

(45 responses)
  • A
    93% (42)
  • B
    4% (2)
  • C
    2% (1)

Why each option

A key difference in AAA is that TACACS+ independently handles Authentication, Authorization, and Accounting services, while RADIUS combines Authentication and Authorization.

ATACACS+ separates AAA services, whereas RADIUS combines authentication and authorization.Correct

TACACS+ strictly separates the Authentication, Authorization, and Accounting (AAA) services, meaning each can be handled independently, whereas RADIUS combines authentication and authorization into a single process or message.

BTACACS+ combines all roles into a single privilege level, whereas RADIUS separates privilege

TACACS+ is known for its granular authorization and support for multiple privilege levels, not combining all roles into a single privilege level.

CTACACS+ supports only Cisco devices, whereas RADIUS supports any RADUIS-compatible

While TACACS+ is Cisco proprietary, it can be used with non-Cisco devices that support it; RADIUS is an open standard and supports any RADIUS-compatible device, but the statement implies exclusivity that is inaccurate.

DTACACS+ supports only local authentication, whereas RADIUS supports remote authentication.

Both TACACS+ and RADIUS support remote authentication against various identity stores like Active Directory or LDAP, not just local authentication.

Concept tested: TACACS+ vs RADIUS AAA separation

Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/DC-AAA.html

Topics

#TACACS+#RADIUS#AAA#Protocol comparison

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice