Which of the following two components does Kerberos Key Distribution Center (KDC) consist of? Each correct answer represents a complete solution. Choose two.

The correct answer is B. Ticket-granting service D. Authentication service. Kerberos KDC is architecturally divided into the Authentication Service (AS) and the Ticket-Granting Service (TGS). The AS handles the initial login - it verifies credentials and issues a Ticket-Granting Ticket (TGT). The TGS then accepts that TGT and issues service-specific tick

Identity and Access Management (IAM) Architecture

Question

Options

AData service
BTicket-granting service
CAccount service
DAuthentication service

How the community answered

(32 responses)

A
3% (1)
B
94% (30)
C
3% (1)

Explanation

Kerberos KDC is architecturally divided into the Authentication Service (AS) and the Ticket-Granting Service (TGS). The AS handles the initial login - it verifies credentials and issues a Ticket-Granting Ticket (TGT). The TGS then accepts that TGT and issues service-specific tickets, allowing the client to access network resources without re-entering credentials. "Data service" (A) and "Account service" (C) are fabricated terms with no defined role in the Kerberos specification - they exist only as distractors.

Memory tip: Think of KDC as a two-step bouncer system - AS checks your ID at the door and gives you a wristband (TGT), then TGS exchanges that wristband for entry to specific rooms (service tickets). The acronym "AS + TGS = KDC" is worth memorizing directly.

Topics

#Kerberos authentication#Authentication Server#Ticket-granting Server#KDC architecture

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice