nerdexam
(ISC)2

CISSP-ISSAP · Question #52

Which of the following are the centralized administration technologies? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. RADIUS B. TACACS+. RADIUS (Remote Authentication Dial-In User Service) and TACACS+ (Terminal Access Controller Access-Control System Plus) are both centralized administration technologies designed to provide Authentication, Authorization, and Accounting (AAA) services from a central server…

Identity and Access Management (IAM) Architecture

Question

Which of the following are the centralized administration technologies? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ARADIUS
  • BTACACS+
  • CMedia Access control
  • DPeer-to-Peer

How the community answered

(37 responses)
  • A
    95% (35)
  • C
    3% (1)
  • D
    3% (1)

Explanation

RADIUS (Remote Authentication Dial-In User Service) and TACACS+ (Terminal Access Controller Access-Control System Plus) are both centralized administration technologies designed to provide Authentication, Authorization, and Accounting (AAA) services from a central server, allowing administrators to manage network access for many users and devices from one location.

Why the distractors are wrong:

  • C. Media Access Control (MAC) is a hardware addressing scheme used to identify devices on a local network segment - it has nothing to do with centralized user administration.
  • D. Peer-to-Peer is the opposite of centralized; it distributes control across nodes with no central authority.

Memory tip: Think of the "AAA hotels" - RADIUS and TACACS+ are the two major "AAA frameworks" (Authentication, Authorization, Accounting). If a technology provides AAA services from a single server, it's centralized. TACACS+ is Cisco-proprietary and encrypts the entire packet; RADIUS is an open standard and encrypts only the password - but both are centralized.

Topics

#RADIUS#TACACS+#AAA protocols#Centralized authentication

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice