GSEC · Question #279
What does PowerShell remoting use to authenticate to another host in a domain environment?
The correct answer is D. Kerberos tickets. PowerShell remoting (WinRM) uses Kerberos for authentication when both hosts are members of the same Active Directory domain.
Question
What does PowerShell remoting use to authenticate to another host in a domain environment?
Options
- ATwo factor codes
- BUnique application passwords
- CPreShared keys
- DKerberos tickets
How the community answered
(53 responses)- A11% (6)
- B4% (2)
- C4% (2)
- D81% (43)
Why each option
PowerShell remoting (WinRM) uses Kerberos for authentication when both hosts are members of the same Active Directory domain.
Two-factor codes are not a native authentication mechanism for WinRM or PowerShell remoting sessions in a domain.
Application passwords are used in scenarios like Azure AD legacy authentication for apps that do not support modern auth, not for WinRM domain remoting.
Pre-shared keys are used in network-layer protocols such as IPsec or WPA2, not in PowerShell remoting authentication flows.
In a domain environment, PowerShell remoting relies on WinRM (Windows Remote Management), which defaults to Kerberos authentication. The Key Distribution Center issues Kerberos tickets that allow mutual authentication between the client and remote host without transmitting credentials over the network. This integration with Active Directory makes Kerberos the standard and default authentication mechanism for domain-joined systems.
Concept tested: PowerShell remoting Kerberos authentication in Active Directory
Source: https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/winrmsecurity
Topics
Community Discussion
No community discussion yet for this question.