An organization is expanding its network team. Currently, it has local accounts on all network devices, but with growth, it wants to move to centrally managed authentication. Which of the following…

TACACS+ (Terminal Access Controller Access-Control System Plus) is a Cisco-developed AAA protocol that provides centralized authentication, authorization, and accounting for network devices, encrypts the entire payload, and offers granular command-level authorization, making it ideal for managing network device access at scale.

CHAP (Challenge Handshake Authentication Protocol) is a point-to-point authentication protocol used to verify identity during link establishment, not a centralized AAA framework for managing network device authentication across an organization.

LDAP (Lightweight Directory Access Protocol) is a directory service query protocol used to look up and manage objects in a directory like Active Directory, but it is not itself a network device AAA solution and lacks the native accounting and authorization features needed for centralized network device management.

RADIUS (Remote Authentication Dial-In User Service) is an open-standard AAA protocol widely supported across multi-vendor network environments that centralizes authentication and accounting, allowing network devices to offload credential management to a central RADIUS server rather than maintaining local accounts on each device.

MSCHAPv2 (Microsoft Challenge Handshake Authentication Protocol version 2) is a mutual authentication protocol primarily used for VPN and wireless client authentication, not a centralized AAA solution for managing administrative access to network infrastructure devices.