Which protocol combines authentication and authorization services into a single function?

Which protocol combines authentication and authorization services into a single function?

• A. RADIUS
• B. TACACS+
• C. Kerberos
• D. LDAP

Answer: (A)

The concept being tested is how a protocol can combine identity verification with access rights in one flow. RADIUS is designed as an AAA protocol that handles authentication and authorization together in a single exchange between the network access device and the server. When a user attempts to connect, credentials are sent to the RADIUS server, which verifies who the user is (authentication) and simultaneously communicates what that user is allowed to do (authorization) by returning appropriate attributes in the response. This centralizes policy enforcement at the network edge and simplifies management, with accounting commonly available as an additional, optional function. Kerberos centers on proving identity with tickets within a trusted realm, but authorization is typically determined by the services the user accesses after authentication rather than being carried out by the same protocol. LDAP is a directory service used to look up information about users and groups; it isn’t an AAA protocol that enforces access control in a single step. TACACS+ separates authentication and authorization into distinct parts rather than merging them into one function.

The concept being tested is how a protocol can combine identity verification with access rights in one flow. RADIUS is designed as an AAA protocol that handles authentication and authorization together in a single exchange between the network access device and the server. When a user attempts to connect, credentials are sent to the RADIUS server, which verifies who the user is (authentication) and simultaneously communicates what that user is allowed to do (authorization) by returning appropriate attributes in the response. This centralizes policy enforcement at the network edge and simplifies management, with accounting commonly available as an additional, optional function.

Kerberos centers on proving identity with tickets within a trusted realm, but authorization is typically determined by the services the user accesses after authentication rather than being carried out by the same protocol. LDAP is a directory service used to look up information about users and groups; it isn’t an AAA protocol that enforces access control in a single step. TACACS+ separates authentication and authorization into distinct parts rather than merging them into one function.