300-715 · Question #44
Which are two characteristics of TACACS+? (Choose two ) ,
The correct answer is A. It uses TCP port 49. C. It separates authorization and authentication functions. TACACS+ uses TCP port 49 and distinctly separates authentication and authorization functionalities, providing granular control over device access.
Question
Which are two characteristics of TACACS+? (Choose two ) ,
Options
- AIt uses TCP port 49.
- BIt combines authorization and authentication functions.
- CIt separates authorization and authentication functions.
- DIt encrypts the password only.
- EIt uses UDP port 49.
How the community answered
(49 responses)- A92% (45)
- B2% (1)
- D4% (2)
- E2% (1)
Why each option
TACACS+ uses TCP port 49 and distinctly separates authentication and authorization functionalities, providing granular control over device access.
TACACS+ primarily uses TCP port 49 for communication between the network access device and the TACACS+ server, ensuring reliable, connection-oriented delivery of AAA messages.
TACACS+ is known for *separating* AAA functions, not combining them, which is a key architectural difference from RADIUS.
TACACS+ separates the authentication, authorization, and accounting (AAA) functions, allowing for independent configuration and enforcement of each service, offering greater flexibility and control compared to RADIUS.
TACACS+ encrypts the entire payload of the packet, not just the password, providing end-to-end confidentiality for all transmitted AAA information.
TACACS+ uses TCP, not UDP, for its communication, leveraging TCP's connection-oriented and reliable delivery features.
Concept tested: TACACS+ characteristics (port, AAA separation)
Source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/white_paper_c11-736005.html
Topics
Community Discussion
No community discussion yet for this question.