Why MUST a Kerberos server be well protected from unauthorized access?

Question

Options

• AIt contains the keys of all clients.
• BIt always operates at root privilege.
• CIt contains all the tickets for services.
• DIt contains the Internet Protocol (IP) address of all network entities.

• A
  87% (26)
• B
  3% (1)
• C
  7% (2)
• D
  3% (1)

Explanation

A Kerberos server must be well protected from unauthorized access because it contains the keys of all clients. Kerberos is a network authentication protocol that uses symmetric cryptography and a trusted third party, called the Key Distribution Center (KDC), to provide secure and mutual authentication between clients and servers. The KDC consists of two components: the Authentication Server (AS) and the Ticket Granting Server (TGS). The AS issues a Ticket Granting Ticket (TGT) to the client after verifying its identity and password. The TGS issues a service ticket to the client after validating its TGT and the requested service. The client then uses the service ticket to access the service. The KDC stores the keys of all clients and services in its database, and uses them to encrypt and decrypt the tickets. If an attacker gains access to the KDC, they can compromise the keys and the tickets, and impersonate any client or service on the

No community discussion yet for this question.