Which type of AAA message does the TACACS+ shared secret key use for encryption between the client and server?
- authentication messages only
- authorization messages only
- accounting messages only
- all messages
Explanation: The TACACS+ protocol is designed for total separation of the three AAA functions and provides superior security compared to RADIUS. According to the sources, while RADIUS only encrypts the password portion of a packet, the entire TACACS+ packet is encrypted. This means that the shared secret key is used to encrypt all traffic—including authentication, authorization, and accounting messages—ensuring that communication between the Network Access Server (NAS) and the TACACS+ server is completely secure.
Related exam: Modules 14 – 16: Checkpoint Exam: Network Security Answers (CCNP ENCOR v9)
