Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 106

An administrator wants to configure network device administration and is trying to decide whether to use TACACS+ or RADIUS. A reliable protocol must be used that can check command authorization. Which protocol meets these requirements and why?

Answer options

• A. RADIUS because it runs over TCP.
• B. RADIUS because it runs over UDP.
• C. TACACS+ because it runs over TCP.
• D. TACACS+ because it runs over UDP.

Correct answer: C

Explanation

The correct answer is C, as TACACS+ operates over TCP, which provides a reliable connection necessary for command authorization. In contrast, RADIUS, while it can provide some authorization, uses UDP (as seen in option B) which does not guarantee delivery. Option A is incorrect because RADIUS does not run over TCP, and option D is wrong because TACACS+ does not operate over UDP.