SY0-301 · Question #570
Ann has taken over as the new head of the IT department. One of her first assignments was to implement AAA in preparation for the company's new telecommuting policy. When she takes inventory of the…
The correct answer is A. RADIUS. RADIUS is an open-standard AAA protocol supported by virtually all network vendors, making it the best choice for centralized access control in a mixed-vendor environment. It provides authentication, authorization, and accounting services required by Ann's telecommuting policy.
Question
Ann has taken over as the new head of the IT department. One of her first assignments was to implement AAA in preparation for the company's new telecommuting policy. When she takes inventory of the organizations existing network infrastructure, she makes note that it is a mix of several different vendors. Ann knows she needs a method of secure centralized access to the company's network resources. Which of the following is the BEST service for Ann to implement?
Options
- ARADIUS
- BLDAP
- CSAML
- DTACACS+
How the community answered
(20 responses)- A85% (17)
- B5% (1)
- C10% (2)
Why each option
RADIUS is an open-standard AAA protocol supported by virtually all network vendors, making it the best choice for centralized access control in a mixed-vendor environment. It provides authentication, authorization, and accounting services required by Ann's telecommuting policy.
RADIUS (Remote Authentication Dial-In User Service) is a widely adopted, vendor-neutral AAA protocol defined in RFC 2865 and supported by network equipment from virtually all manufacturers. In a mixed-vendor environment, RADIUS ensures interoperability across different devices while providing centralized authentication, authorization, and accounting for remote access. This makes it the most practical and scalable solution for Ann's requirement.
LDAP is a directory access protocol used to query and modify directory services and is not itself an AAA server protocol capable of managing network access control for telecommuting.
SAML is a federation standard for web-based single sign-on between identity providers and service providers and is not used for network-level AAA in the context of remote access to network infrastructure.
TACACS+ is primarily associated with Cisco infrastructure and, while functional in Cisco-heavy environments, is not as universally supported across mixed-vendor networks as RADIUS.
Concept tested: RADIUS for centralized AAA in mixed-vendor networks
Source: https://datatracker.ietf.org/doc/html/rfc2865
Topics
Community Discussion
No community discussion yet for this question.