CompTIA Security+ (SY0-501) — Question 885

An organization is expanding its network team. Currently, it has local accounts on all network devices, but with growth, it wants to move to centrally managed authentication. Which of the following are the BEST solutions for the organization? (Choose two.)

Answer options

• A. TACACS+
• B. CHAP
• C. LDAP
• D. RADIUS
• E. MSCHAPv2

Correct answer: A, D

Explanation

TACACS+ and RADIUS are both protocols designed for centralized authentication, making them ideal for the organization’s needs as it expands. CHAP, LDAP, and MSCHAPv2 do not provide the same level of centralized management or security features that TACACS+ and RADIUS offer, making them less suitable for the organization's goal.