Which of the following authentication protocols could be used to authenticate network administrators at a datacenter to manage switches over a remote SSH connection? (Select TWO).

LDAP is a directory services protocol used to query and retrieve identity information from a directory, but it is not a dedicated AAA protocol designed for authenticating SSH-based network device management sessions.

TACACS+ (Terminal Access Controller Access-Control System Plus) is specifically designed for network device administration AAA, separating authentication, authorization, and accounting into independent processes. It integrates directly with SSH-based management sessions on switches and routers, making it the preferred protocol for this use case.

RADIUS (Remote Authentication Dial-In User Service) is a widely supported client-server AAA protocol that can authenticate users attempting administrative SSH sessions on network infrastructure devices. It is vendor-neutral and supported by virtually all switch platforms.

SNMP (Simple Network Management Protocol) is used for monitoring and managing network device metrics and configurations, not for authenticating administrative login sessions to those devices.

IPSec is a network-layer suite of protocols for encrypting and securing IP traffic between endpoints, not a mechanism for authenticating individual user login sessions.

MSCHAP (Microsoft Challenge Handshake Authentication Protocol) is used in PPP-based dial-up and VPN connections, not for authenticating SSH administrative sessions to network switches.