SSCP Exam QuestionsBrowse all questions from this exam

SSCP Exam - Question 141


Which of the following remote access authentication systems is the most robust?

Show Answer
Correct Answer: A

TACACS+ is considered the most robust remote access authentication system among the options. It uses the TCP transport protocol on port 49, which enhances its reliability compared to RADIUS, which uses UDP. Additionally, TACACS+ separates authentication and authorization functions, allowing for more granular control over access. It also encrypts the entire payload of packets, providing a higher level of security, whereas RADIUS only encrypts passwords. PAP (Password Authentication Protocol) is a simple protocol that is not as secure as TACACS+ or RADIUS. TACACS is an older protocol that has been largely replaced by TACACS+ due to its limitations.

Discussion

3 comments
Sign in to comment
j904Option: C
Feb 20, 2024

This question was seen earlier and is C

j904
Feb 20, 2024

I meant C for the previous question please delete this

gabbinuOption: A
May 9, 2024

Correct answer is A. TACACS+ uses TCP transport protocol on port 49, which makes it more reliable than RADIUS, which uses UDP. TACACS+ allows to control the authorization of router commands on a per user or per group basis. TACACS+ can do this because it separates authentication and authorization functions, while RADIUS can’t because it combines them. So RADIUS does not allow to control your users on which commands can be executed on a router and which cannot. Another important advantage is that TACACS+ encrypts the entire payload of the TACACS+ packet, which provides secure communication between the Network Access Server (NAS) and the TACACS+ server. RADIUS, on the other hand, encrypts only the password, so intercepting packets can reveal important information.