nerdexam
Cisco

210-250 · Question #172

In which technology is network level encrypted not natively incorporated?

The correct answer is A. Kerberos. Kerberos is an authentication protocol and does not natively provide network-level encryption, unlike SSL, TLS, and IPsec which are designed to encrypt data in transit.

Security Technologies

Question

In which technology is network level encrypted not natively incorporated?

Options

  • AKerberos
  • BSSL
  • CTLS
  • DIPsec

How the community answered

(27 responses)
  • A
    74% (20)
  • B
    7% (2)
  • C
    15% (4)
  • D
    4% (1)

Why each option

Kerberos is an authentication protocol and does not natively provide network-level encryption, unlike SSL, TLS, and IPsec which are designed to encrypt data in transit.

AKerberosCorrect

Kerberos is a ticket-based authentication protocol (RFC 4120) that verifies identities using a Key Distribution Center, but it does not natively encrypt the network traffic itself. It issues session keys used by applications to optionally encrypt communications, but network-level encryption is not built into the protocol. Encryption of the channel must be handled separately, for example by layering Kerberos over a TLS session.

BSSL

SSL (Secure Sockets Layer) was explicitly designed to encrypt network communications at the transport layer, so encryption is natively incorporated.

CTLS

TLS (Transport Layer Security) is the direct successor to SSL and natively provides network-level encryption for data in transit.

DIPsec

IPsec (Internet Protocol Security) operates at the network layer (Layer 3) and natively encrypts IP packets, making encryption a core part of the protocol.

Concept tested: Kerberos authentication vs. network-level encryption protocols

Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview

Topics

#Kerberos#network encryption#IPsec#TLS

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice