Certified Ethical Hacker (CEH v10) — Question 164

An Internet Service Provider (ISP) has a need to authenticate users connecting via analog modems, Digital Subscriber Lines (DSL), wireless data services, and
Virtual Private Networks (VPN) over a Frame Relay network.
Which AAA protocol is the most likely able to handle this requirement?

Answer options

• A. DIAMETER
• B. RADIUS
• C. TACACS+
• D. Kerberos

Correct answer: B

Explanation

RADIUS is specifically designed for remote user authentication and is widely used by ISPs for various connection types, making it the most suitable choice. DIAMETER, while more advanced, is not as commonly implemented for simple authentication tasks. TACACS+ is more suited for device administration rather than user authentication, and Kerberos typically requires a more complex setup not ideal for this scenario.