An administrator wants to integrate the Credential Security Support Provider (CredSSP) protocol network level authentication (NLA) into the remote desktop terminal services environment. Which of the…

Kerberos is the primary authentication protocol used by CredSSP when both the client and server are members of an Active Directory domain, providing mutual authentication before credentials are delegated.

NTLM is supported as the fallback authentication mechanism in CredSSP for scenarios where Kerberos is unavailable, such as workgroup environments or cross-domain configurations without trust relationships.

RADIUS is an AAA protocol used for network device and VPN access authentication and is not part of the Windows CredSSP or NLA protocol stack.

TACACS+ is a Cisco-centric device administration AAA protocol and has no role in the Windows Remote Desktop NLA or CredSSP implementation.

TLS provides the encrypted tunnel that CredSSP wraps around the entire authentication exchange and credential delegation process, protecting credentials from interception during the NLA handshake.

HMAC is a keyed-hash message authentication code primitive used internally within other cryptographic protocols and is not an independently selectable method in CredSSP.

Camellia is a symmetric cipher not included in the Windows TLS cipher suite set used by CredSSP, which relies on AES-based suites negotiated through the Windows Schannel provider.