E10-001 · Question #113
In a NAS environment, what is a role of the Kerberos protocol?
The correct answer is C. Allow clients to prove their identity to the servers. Kerberos-Network Authentication Protocol Kerberos is a network authentication protocol, which is designed to provide strong authentication for client/server applications by using secret-key cryptography. It uses cryptography so that a client and server can prove their identity…
Question
In a NAS environment, what is a role of the Kerberos protocol?
Options
- AContain ACLs that specify access rights for files/folders
- BAuthenticate clients using the CHAP protocol
- CAllow clients to prove their identity to the servers
- DSet up a virtual private network connection
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C81% (25)
- D10% (3)
Explanation
Kerberos-Network Authentication Protocol Kerberos is a network authentication protocol, which is designed to provide strong authentication for client/server applications by using secret-key cryptography. It uses cryptography so that a client and server can prove their identity to each other across an insecure network connection. After the client and server have proven their identities, they can choose to encrypt all their communications to ensure privacy and data integrity. In Kerberos, authentications occur between clients and servers. The client gets a ticket for a service and the server decrypts this ticket by using its secret key. Any entity, user, or host that gets a service ticket for a Kerberos service is called a Kerberos client. The term Kerberos server generally refers to the Key Distribution Center (KDC). The KDC implements the Authentication Service (AS) and the Ticket Granting Service (TGS). The KDC has a copy of every password associated with every principal, so it is absolutely vital that the KDC remain secure. In Kerberos, users and servers for which a secret key is stored in the KDC database are known as principals.
Topics
Community Discussion
No community discussion yet for this question.