What is a difference between RADIUS compared to TACACS+?

The correct answer is D. RADIUS encrypts passwords only, and TACACS+ encrypts all packets. The key architectural difference between RADIUS and TACACS+ is encryption scope. RADIUS encrypts only the password field within its packets, leaving other attributes (like the username) in plaintext. TACACS+ encrypts the entire packet body, offering stronger confidentiality…

Network Access Device Administration

Question

Options

ARADIUS separates AAand TACACS+ combines authentication and authorization.
BRADIUS has multiprotocol support, and TACACS+ supports only IP
CRADIUS uses UDP ports 1812 and 1813. and TACACS+ uses UDP ports 1645 and 1646
DRADIUS encrypts passwords only, and TACACS+ encrypts all packets.

How the community answered

(28 responses)

B
4% (1)
C
7% (2)
D
89% (25)

Explanation

The key architectural difference between RADIUS and TACACS+ is encryption scope. RADIUS encrypts only the password field within its packets, leaving other attributes (like the username) in plaintext. TACACS+ encrypts the entire packet body, offering stronger confidentiality. Choice A is backwards: it is RADIUS that combines authentication and authorization in a single packet, while TACACS+ separates all three AAA functions. Choice B is incorrect because TACACS+ is not limited to IP. Choice C is wrong on the transport layer: TACACS+ uses TCP port 49, not UDP; RADIUS uses UDP 1812/1813 for authentication/accounting (legacy ports 1645/1646 are sometimes seen but do not define TACACS+).

Topics

#RADIUS#TACACS+#AAA protocols#Encryption

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice