210-250 · Question #172
In which technology is network level encrypted not natively incorporated?
The correct answer is A. Kerberos. Kerberos is an authentication protocol and does not natively provide network-level encryption, unlike SSL, TLS, and IPsec which are designed to encrypt data in transit.
Question
In which technology is network level encrypted not natively incorporated?
Options
- AKerberos
- BSSL
- CTLS
- DIPsec
How the community answered
(27 responses)- A74% (20)
- B7% (2)
- C15% (4)
- D4% (1)
Why each option
Kerberos is an authentication protocol and does not natively provide network-level encryption, unlike SSL, TLS, and IPsec which are designed to encrypt data in transit.
Kerberos is a ticket-based authentication protocol (RFC 4120) that verifies identities using a Key Distribution Center, but it does not natively encrypt the network traffic itself. It issues session keys used by applications to optionally encrypt communications, but network-level encryption is not built into the protocol. Encryption of the channel must be handled separately, for example by layering Kerberos over a TLS session.
SSL (Secure Sockets Layer) was explicitly designed to encrypt network communications at the transport layer, so encryption is natively incorporated.
TLS (Transport Layer Security) is the direct successor to SSL and natively provides network-level encryption for data in transit.
IPsec (Internet Protocol Security) operates at the network layer (Layer 3) and natively encrypts IP packets, making encryption a core part of the protocol.
Concept tested: Kerberos authentication vs. network-level encryption protocols
Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview
Topics
Community Discussion
No community discussion yet for this question.