Question

question 2

what makes tacacs+ different from radius?

a tacacs+ separates aaa functions.
b tacacs+ is less secure than radius.
c tacacs+ combines aaa in a single process.
d tacacs+ uses udp for communication.

Explanation:

Analyze the AAA architecture of both protocols

TACACS+ (Terminal Access Controller Access-Control System Plus) and RADIUS (Remote Authentication Dial-In User Service) are both security protocols used for Authentication, Authorization, and Accounting (AAA). A fundamental architectural difference is how they handle these three services. TACACS+ separates the authentication, authorization, and accounting functions into independent, modular processes. This allows a network administrator to use TACACS+ for authentication while delegating authorization or accounting to other mechanisms. In contrast, RADIUS combines authentication and authorization into a single transaction profile.

Evaluate the transport layer and security differences

TACACS+ uses TCP (Transmission Control Protocol) on port 49, which provides reliable, connection-oriented delivery. RADIUS typically uses UDP (User Datagram Protocol) on ports 1812 and 1813. Furthermore, TACACS+ encrypts the entire payload of the packet (except for a standard header), making it more secure during transmission. RADIUS only encrypts the password field within the packet, leaving other attributes exposed in cleartext.

Assess the given multiple-choice options

• Option A: "TACACS+ separates AAA functions." This is correct because TACACS+ decouples authentication, authorization, and accounting, whereas RADIUS combines authentication and authorization.
• Option B: "TACACS+ is less secure than RADIUS." This is incorrect because TACACS+ encrypts the entire packet payload, making it more secure than RADIUS, which only encrypts the password.
• Option C: "TACACS+ combines AAA in a single process." This is incorrect; this describes RADIUS.
• Option D: "TACACS+ uses UDP for communication." This is incorrect; TACACS+ uses TCP, while RADIUS uses UDP.

Answer:

• (A) TACACS+ separates AAA functions. (Correct answer)
• (B) TACACS+ is less secure than RADIUS.
• (C) TACACS+ combines AAA in a single process.
• (D) TACACS+ uses UDP for communication.