nerdexam
CompTIA

SY0-301 · Question #570

Ann has taken over as the new head of the IT department. One of her first assignments was to implement AAA in preparation for the company's new telecommuting policy. When she takes inventory of the…

The correct answer is A. RADIUS. RADIUS is an open-standard AAA protocol supported by virtually all network vendors, making it the best choice for centralized access control in a mixed-vendor environment. It provides authentication, authorization, and accounting services required by Ann's telecommuting policy.

Security architecture

Question

Ann has taken over as the new head of the IT department. One of her first assignments was to implement AAA in preparation for the company's new telecommuting policy. When she takes inventory of the organizations existing network infrastructure, she makes note that it is a mix of several different vendors. Ann knows she needs a method of secure centralized access to the company's network resources. Which of the following is the BEST service for Ann to implement?

Options

  • ARADIUS
  • BLDAP
  • CSAML
  • DTACACS+

How the community answered

(20 responses)
  • A
    85% (17)
  • B
    5% (1)
  • C
    10% (2)

Why each option

RADIUS is an open-standard AAA protocol supported by virtually all network vendors, making it the best choice for centralized access control in a mixed-vendor environment. It provides authentication, authorization, and accounting services required by Ann's telecommuting policy.

ARADIUSCorrect

RADIUS (Remote Authentication Dial-In User Service) is a widely adopted, vendor-neutral AAA protocol defined in RFC 2865 and supported by network equipment from virtually all manufacturers. In a mixed-vendor environment, RADIUS ensures interoperability across different devices while providing centralized authentication, authorization, and accounting for remote access. This makes it the most practical and scalable solution for Ann's requirement.

BLDAP

LDAP is a directory access protocol used to query and modify directory services and is not itself an AAA server protocol capable of managing network access control for telecommuting.

CSAML

SAML is a federation standard for web-based single sign-on between identity providers and service providers and is not used for network-level AAA in the context of remote access to network infrastructure.

DTACACS+

TACACS+ is primarily associated with Cisco infrastructure and, while functional in Cisco-heavy environments, is not as universally supported across mixed-vendor networks as RADIUS.

Concept tested: RADIUS for centralized AAA in mixed-vendor networks

Source: https://datatracker.ietf.org/doc/html/rfc2865

Topics

#AAA#RADIUS#centralized authentication#network access control

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice