Exam SY0-501 topic 1 question 114 discussion

Actual exam question from CompTIA's SY0-501

Question #: 114
Topic #: 1

Joe, a security administrator, needs to extend the organization's remote access functionality to be used by staff while travelling. Joe needs to maintain separate access control functionalities for internal, external, and VOIP services. Which of the following represents the BEST access technology for Joe to use?

A. RADIUS
B. TACACS+
C. Diameter
D. Kerberos

Show Suggested Answer

Suggested Answer: B 🗳️

by Basem at Aug. 6, 2019, 5:07 a.m.

Comments

Submit Cancel

Stefanvangent

Highly Voted 5 years, 9 months ago

Authentication and Authorization is separate in TACACS+. It also supports two methods to control the authorization of router commands on a per-user or per-group basis. In Radius Authentication and Authorization is combined and Radius also doesn't support Access to Router CLI Commands.

upvoted 20 times

...

Stefanvangent

Highly Voted 5 years, 9 months ago

upvoted 5 times

...

Harbinger147

Most Recent 3 years, 10 months ago

IF i recall, isnt TACACS+ a Cisco authentication/authorization to begin with? I find the qustion odd for some reason since you would only be able to have cisco devices for tacacs+

upvoted 1 times

...

thioseck

4 years, 7 months ago

B because only TACACS+ separate the functions

upvoted 2 times

...

dieglhix

4 years, 8 months ago

Key words: Separate access : RADIUS & TACACS+ - Best: TACACS+

upvoted 1 times

...

vaxakaw829

4 years, 10 months ago

TACACS+ is the correct answer. One of the key differentiators of TACACS+ is its ability to separate authentication, authorization and accounting as separate and independent functions. This is why TACACS+ is so commonly used for device administration, even though RADIUS is still certainly capable of providing device administration AAA. https://www.networkworld.com/article/2838882/radius-versus-tacacs.html

upvoted 3 times

vaxakaw829

4 years, 10 months ago

"to maintain separate access control functionalities" is the key.

upvoted 3 times

...

leesuh

4 years, 10 months ago

TACACS can be used for VoIP; combines Authorization and Authentication -- its all in one Kerberos doesn't have remote functionality RADIUS/Diameter are just for (wireless) authentication services-- if you use this, you need another service for authorization

upvoted 2 times

smatthew777

4 years, 10 months ago

(RADIUS) is a network protocol that provides security to networks against unauthorized access. RADIUS secures a network by enabling centralized authentication of dial-in users and authorizing their access to use a network service. It manages remote user authentication, authorization and accounting (AAA). https://www.techopedia.com/definition/4079/remote-authentication-dial-in-user-service-radius

upvoted 2 times

...

MagicianRecon

4 years, 11 months ago

Answer should be RADIUS. TACACS+ is typically used for device authentication and command authz RADIUS supports both auth and authz but in a single packet which is Accept-access TACACS+ separates that into different packets.

upvoted 1 times

...