GSLC · Question #198
You work as a Network Administrator for PassGuide Inc. You have been assigned a task to provide the right authentications to users. Which method that uses a KDC will you use to accomplish the task?
The correct answer is D. Kerberos. Kerberos is the authentication protocol that uses a Key Distribution Center (KDC) to issue tickets and verify identity on a network without transmitting passwords.
Question
You work as a Network Administrator for PassGuide Inc. You have been assigned a task to provide the right authentications to users. Which method that uses a KDC will you use to accomplish the task?
Options
- ABiometrics
- BBasic authentication
- CDigest authentication
- DKerberos
How the community answered
(33 responses)- A3% (1)
- C6% (2)
- D91% (30)
Why each option
Kerberos is the authentication protocol that uses a Key Distribution Center (KDC) to issue tickets and verify identity on a network without transmitting passwords.
Biometrics authenticates users via physical traits such as fingerprints or iris scans and does not involve a KDC, tickets, or centralized key management infrastructure.
Basic authentication encodes credentials in Base64 and sends them in an HTTP header; it has no concept of a KDC, session tickets, or symmetric key exchange.
Digest authentication is an HTTP challenge-response mechanism that hashes credentials before transmission but does not involve a KDC or issue time-limited tickets.
Kerberos is a network authentication protocol built around a trusted third party called the Key Distribution Center (KDC), which consists of the Authentication Server and the Ticket Granting Server. When a user logs in, the KDC issues encrypted, time-limited tickets that the user presents to services to prove identity, eliminating the need to send credentials across the network.
Concept tested: Kerberos authentication using Key Distribution Center (KDC)
Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview
Topics
Community Discussion
No community discussion yet for this question.