nerdexam
CompTIA

SY0-301 · Question #96

Which of the following is an authentication service that uses UDP as a transport medium?

The correct answer is D. RADIUS. RADIUS is the authentication, authorization, and accounting protocol that uses UDP as its transport. TACACS+, by contrast, uses TCP.

General security concepts

Question

Which of the following is an authentication service that uses UDP as a transport medium?

Options

  • ATACACS+
  • BLDAP
  • CKerberos
  • DRADIUS

How the community answered

(26 responses)
  • A
    4% (1)
  • C
    8% (2)
  • D
    88% (23)

Why each option

RADIUS is the authentication, authorization, and accounting protocol that uses UDP as its transport. TACACS+, by contrast, uses TCP.

ATACACS+

TACACS+ (Terminal Access Controller Access-Control System Plus) uses TCP port 49, providing connection-oriented, reliable transport - not UDP.

BLDAP

LDAP (Lightweight Directory Access Protocol) uses TCP port 389 (or TCP 636 for LDAPS) and is a directory service protocol, not primarily an authentication transport service.

CKerberos

Kerberos primarily uses TCP for larger tickets and UDP for smaller exchanges, but it is not described as a UDP authentication service and is not the answer being sought here.

DRADIUSCorrect

RADIUS (Remote Authentication Dial-In User Service) uses UDP port 1812 for authentication and authorization, and UDP port 1813 for accounting. Its use of UDP makes it connectionless, which improves performance in high-volume environments at the cost of built-in reliability. This is a key distinguishing characteristic from TACACS+, which uses TCP.

Concept tested: RADIUS authentication protocol UDP transport

Source: https://www.rfc-editor.org/rfc/rfc2865

Topics

#RADIUS#AAA#UDP#authentication protocols

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice