On the client of FusionInsight HD, execute the kinit {account} command to get what item of KDC?

Question

Options

• AKrb5.conf
• BTGT
• CST
• Djaas.conf

• A
  15% (4)
• B
  73% (19)
• C
  8% (2)
• D
  4% (1)

Explanation

Running kinit {account} authenticates the user against the Kerberos Key Distribution Center (KDC) and retrieves a Ticket Granting Ticket (TGT) - the initial credential that proves your identity and enables you to request service access without re-entering your password. The TGT is what the KDC issues after validating your credentials, making B correct.

Why the distractors are wrong:

• A. Krb5.conf - This is a local Kerberos configuration file (specifying realm, KDC addresses, etc.); it's not issued by the KDC.
• C. ST (Service Ticket) - A Service Ticket is obtained after presenting your TGT to the Ticket Granting Service (TGS); kinit doesn't fetch this directly.
• D. jaas.conf - This is a Java Authentication and Authorization Service configuration file used by Java applications; it has no relationship to what the KDC returns.

Memory tip: Think of kinit as "key initialization" - it gets you the master key to the Kerberos kingdom (the TGT), which you then exchange for individual room keys (STs) to access specific services.

No community discussion yet for this question.