Which protocol encrypts only the password in Access-Request packets?

Which protocol encrypts only the password in Access-Request packets?

• A. RADIUS
• B. TACACS+
• C. AAA
• D. SSH

Answer: (A)

RADIUS is the protocol that encrypts only the password in Access-Request packets. It protects the password by obfuscating it with a shared secret and a Request Authenticator using an MD5-based method, while other attributes in the request (like the username) are sent in clear text. This selective encryption is why the password isn’t sent in the same way as the rest of the data. In contrast, TACACS+ encrypts the entire payload between client and server, SSH protects the entire session, and AAA is a framework for authentication, authorization, and accounting rather than a single protocol.

RADIUS is the protocol that encrypts only the password in Access-Request packets. It protects the password by obfuscating it with a shared secret and a Request Authenticator using an MD5-based method, while other attributes in the request (like the username) are sent in clear text. This selective encryption is why the password isn’t sent in the same way as the rest of the data. In contrast, TACACS+ encrypts the entire payload between client and server, SSH protects the entire session, and AAA is a framework for authentication, authorization, and accounting rather than a single protocol.