Implementing Cisco IP Routing (CCNP ROUTE, legacy) — Question 45

Which statement is true?

Answer options

• A. RADIUS uses TCP, and TACACS+ uses UDP.
• B. RADIUS encrypts the entire body of the packet.
• C. TACACS+ encrypts only the password portion of a packet.
• D. TACACS+ separates authentication and authorization. D

Correct answer:

Explanation

The correct answer is D, as TACACS+ does indeed separate the processes of authentication and authorization, providing more granular control. Option A is incorrect because RADIUS uses UDP while TACACS+ uses TCP. Option B is wrong since RADIUS only encrypts the header and not the entire packet. Option C is also incorrect; TACACS+ encrypts the entire packet, not just the password.