4.1

Question 1

RADIUS

Answer 1

-More common AAA protocol.
-centralize authentication
-requires additional encryption to secure data during authentication process.

*AAA through RADIUS uses Server secret key (a shared secret key). A key mismatch could cause log in problems.

Question 2

TACACS+

Answer 2

-require additional encryption to secure data during authentication process

Question 3

LDAP

Answer 3

-Uses TCP/IP
-Used in windows AD
-Used to query and update x.500 directory
-container and leaf objects

Question 4

Kerberos

Answer 4

-authenticate once, trusted
-client and server authenticates with each other
-uses cryptographic tickets
-can be used over insecure networks while using strong encryption to protect data.

Question 5

802.1x

Answer 5

Port based NAC
EAP integrates with 802.1x
Used in conjunction with access database (radius, TACACS, ldap)

Question 6

EAP

Answer 6

Extensible Authentication Protocol

-Authentication framework
-Many different ways to authenticate
-Manufacturers can build their own EAP methods