What is the PRIMARY advantage of using a separate authentication server (e.g., Remote Access
Dial-In User System, Terminal Access Controller Access Control System) to authenticate dial-in
users?

A.
Single user logons are easier to manage and audit.

B.
Each session has a unique (one-time) password assigned to it.

C.
Audit and access information are not kept on the access server.

D.
Call-back is very difficult to defeat.

Explanation:
TACACS integrates the authentication and authorization processes. XTACACS keeps the
authentication, authorization and accounting processes separate. TACACS+ improves XTACACS
by adding two-factor authentication. – Ed Tittle CISSP Study Guide (sybex) pg 745