Identify the type of authentication mechanism represented below:

The correct answer is D. Kerberos. The client authenticates itself to the Authentication Server (AS) which forwards the username to a key distribution center (KDC). The KDC issues a ticket granting ticket (TGT), which is time stamped, encrypts it using the user's password and returns the encrypted result to the…

Section 4: Authentication and Authorization

Question

Exhibit

Options

ANTLMv1
BNTLMv2
CLAN Manager Hash
DKerberos

How the community answered

(28 responses)

A
11% (3)
B
4% (1)
C
7% (2)
D
79% (22)

Explanation

The client authenticates itself to the Authentication Server (AS) which forwards the username to a key distribution center (KDC). The KDC issues a ticket granting ticket (TGT), which is time stamped, encrypts it using the user's password and returns the encrypted result to the user's workstation. This is done infrequently, typically at user logon; the TGT expires at some point, though may be transparently renewed by the user's session manager while they are logged in. When the client needs to communicate with another node ("principal" in Kerberos parlance) the client sends the TGT to the ticket granting service (TGS), which usually shares the same host as the KDC. After verifying the TGT is valid and the user is permitted to access the requested service, the TGS issues a ticket and session keys, which are returned to the client. The client then sends the ticket to the service server (SS) along with its service request.

Topics

#Kerberos#authentication protocols#NTLM#authentication mechanisms

Community Discussion

No community discussion yet for this question.

Full 412-79V8 Practice