Certified Ethical Hacker (CEH v11) — Question 232

An Internet Service Provider (ISP) has a need to authenticate users connecting via analog modems, Digital Subscriber Lines (DSL), wireless data services, and
Virtual Private Networks (VPN) over a Frame Relay network.
Which AAA protocol is the most likely able to handle this requirement?

Answer options

• A. RADIUS
• B. Kerberos
• C. DIAMETER
• D. TACACS+

Correct answer: A

Explanation

RADIUS is specifically designed for remote access authentication, making it ideal for various connection types such as analog modems and DSL. Kerberos is more suited for internal network authentication and isn't optimized for the diverse connection methods mentioned. DIAMETER, while more advanced than RADIUS, is less commonly implemented in these scenarios, and TACACS+ is typically used in network device management rather than user authentication across these mediums.