Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 40
- A TACACS+
- B RADIUS
- C Diameter
- D Kerberos
Reveal correct answer
Correct answer: C
Explanation
Correct Answer:
C is correct. Remote Authentication Dial-In User Service (RADIUS) has 28 (256) attribute-value pairs (AVPs), while Diameter has 232 AVPs. which allows the network administrator to define ACLs, filters, user privileges, and much more.
Incorrect Answers:
A is incorrect. Terminal Access Controller Access Control System Plus (TACACS+) has many more attribute-value pairs (AVPs) than Remote Authentication Dial-In User Service (RADIUS), but not as many as Diameter. AVPs allow the network administrator to define ACLs, filters, user privileges, and much more.
B is incorrect. Compared to Diameter, Remote Authentication Dial-In User Service (RADIUS) does not have a large attribute-value pair (AVP) set. RADIUS has 28 (256) AVPs, whereas Diameter has 232 AVPs. AVPs allow the network administrator to define ACLs, filters, user privileges, and much more.
D is incorrect. Kerberos is a client/server authentication protocol based on symmetric key cryptography that can provide single sign-on (SSO) for distributed environments. Kerberos does not have an attribute-value pair (AVP) set and does not provide AAA functionality for other protocols and services.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
