TACACS+ vs. TACACS: Key Advantages

TACACS+ vs. TACACS

Prev Question Next Question

Question

Which of the following is NOT an advantage that TACACS+ has over TACACS?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

Although TACACS+ provides better audit trails, event logging is a service that is provided with TACACS.

Source: KRUTZ, Ronald L.

& VINES, Russel.

D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page 121).

TACACS (Terminal Access Controller Access Control System) and TACACS+ (Terminal Access Controller Access Control System Plus) are both protocols used for network access control. However, TACACS+ has some advantages over TACACS.

TACACS+ provides several advantages over TACACS. These include:

A. Event logging: TACACS+ can log every event that takes place, providing detailed information about who accessed the system, when they accessed it, and what they did while they were there. This is not a feature of TACACS.

B. Use of two-factor password authentication: TACACS+ supports two-factor authentication, which requires two forms of authentication to be provided before access is granted. This can include a password and a security token, for example. TACACS does not support two-factor authentication.

C. User has the ability to change his password: TACACS+ allows users to change their passwords, which is not possible with TACACS.

D. Ability for security tokens to be resynchronized: TACACS+ can resynchronize security tokens, which is important in cases where a token is lost or stolen. TACACS does not have this capability.

Therefore, the correct answer to the question is C. User has the ability to change his password. This is not an advantage that TACACS+ has over TACACS, as both protocols support password changes.