nerdexam
(ISC)2

SSCP · Question #111

Which of the following statements pertaining to Kerberos is false?

The correct answer is C. Kerberos uses a database to keep a copy of all users' public keys.. Kerberos uses symmetric (secret) key cryptography, so its database stores copies of users' secret (symmetric) keys - not public keys. Public keys belong to asymmetric (PKI) systems. The other statements are true: the KDC is a single point of failure (if it goes down, authenticati

Submitted by renata2k· Apr 18, 2026Access Controls

Question

Which of the following statements pertaining to Kerberos is false?

Options

  • AThe Key Distribution Center represents a single point of failure.
  • BKerberos manages access permissions.
  • CKerberos uses a database to keep a copy of all users' public keys.
  • DKerberos uses symmetric key cryptography.

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    88% (28)
  • D
    3% (1)

Explanation

Kerberos uses symmetric (secret) key cryptography, so its database stores copies of users' secret (symmetric) keys - not public keys. Public keys belong to asymmetric (PKI) systems. The other statements are true: the KDC is a single point of failure (if it goes down, authentication fails); however, Kerberos handles authentication and ticket granting, not fine-grained access permissions (authorization); and it definitively uses symmetric cryptography.

Topics

#Kerberos#Authentication#Symmetric Cryptography#Key Distribution Center

Community Discussion

No community discussion yet for this question.

Full SSCP Practice