組織は、ユーザーのために AAA を実装しています。ネットワーク管理者が入力するすべてのコマンドについて、承認が検証されていることを確認する必要があります。この機能を提供するには、どのプロトコルを構成する必要がありますか?
正解:D
TACACS+ is a protocol that provides authentication, authorization, and accounting (AAA) services for network devices. Unlike RADIUS, which only supports authorization at the user level, TACACS+ supports authorization at the command level. This means that TACACS+ can verify the permissions of the network administrator for every command that is entered, and allow or deny access accordingly. This provides more granular and secure control over network resources and operations. EAPOL, SSH, and RADIUS are not protocols that can provide command-level authorization for AAA. References := Some possible references are:
* Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0, Module 1: Security Concepts, Lesson 1.2: Network Security Devices and Cloud Services, Topic 1.2.3: AAA
* 350-701 SCOR - Cisco, Exam Topics, 1.0 Security Concepts, 1.2 Compare network security solutions,
1.2.a AAA
* What Is AAA Security? | Fortinet, Authentication, Authorization, and Accounting (AAA)