Cisco Certified Internetwork Expert (CCIE) Practice Test

Which option describes a primary function of TACACS+ authentication?

1. Maintaining routing tables

2. Tracking user access across sessions

3. Enforcing security policy updates

4. Providing authorization for commands and actions

The correct answer is: Providing authorization for commands and actions

The primary function of TACACS+ (Terminal Access Controller Access-Control System Plus) authentication is to provide authorization for commands and actions. TACACS+ is a protocol that allows for secure communication between network devices and authentication servers, particularly in environments that require centralized control and auditing of user activities. When users attempt to execute commands or access certain network resources, TACACS+ can determine whether they have the appropriate permissions. This capability is essential for maintaining the integrity and security of network operations, as it ensures that only authorized individuals can perform specific actions or access sensitive parts of the system. While the other options pertain to network management aspects, they do not align with the primary role of TACACS+ as effectively as the authorization function does. Maintaining routing tables concerns the routing protocols and their operations, tracking user access relates to session management that may involve accounting functionalities rather than authorization, and enforcing security policy updates refers to the implementation of organizational policies rather than the authentication or authorization processes that TACACS+ specifically handles.