Which of the following authentication services can use Kerberos or NTLM as its underlying authentication protocol?

Question

Options

• ALDAP
• BRADIUS
• CMicrosoft Active Directory
• DRSA SecurID

• A
  4% (1)
• C
  88% (22)
• D
  8% (2)

Explanation

Microsoft Active Directory (AD) is correct because it is a Microsoft directory service that natively supports both Kerberos (its default authentication protocol since Windows 2000) and NTLM (kept for backward compatibility with older systems).

Why the distractors are wrong:

• A. LDAP - LDAP is a directory access protocol used to query and modify directory services (including AD), but it is not itself an authentication service; it relies on other mechanisms for auth.
• B. RADIUS - RADIUS is a network access authentication protocol (used for VPNs, Wi-Fi, dial-up), but it uses its own authentication methods (PAP, CHAP, EAP) - not Kerberos or NTLM.
• D. RSA SecurID - This is a two-factor authentication (2FA) token system; it generates one-time passcodes and does not use Kerberos or NTLM.

Memory tip: Think "Microsoft = Kerberos + NTLM" - both protocols are Microsoft/Windows ecosystem technologies, so the Microsoft service (Active Directory) is the only answer that makes sense. If you see Kerberos or NTLM on an exam, think Windows domain authentication → Active Directory.

No community discussion yet for this question.