Which of the following protects Kerberos against replay attacks?

The correct answer is D. Time stamps. Kerberos uses timestamps embedded in tickets (specifically in the Authenticator) to defend against replay attacks. Each ticket is only valid for a short window of time (typically 5 minutes). If an attacker captures and replays a ticket outside that window, the Key Distribution…

Submitted by kev92· Apr 18, 2026Access Controls

Question

Options

ATokens
BPasswords
CCryptography
DTime stamps

How the community answered

(20 responses)

A
5% (1)
D
95% (19)

Explanation

Kerberos uses timestamps embedded in tickets (specifically in the Authenticator) to defend against replay attacks. Each ticket is only valid for a short window of time (typically 5 minutes). If an attacker captures and replays a ticket outside that window, the Key Distribution Center (KDC) or service will reject it. Tokens and cryptography are used in Kerberos but are not the specific mechanism for replay prevention. Passwords are used for initial authentication, not replay defense.

Topics

#Kerberos#Replay attacks#Timestamps#Authentication protocols

Community Discussion

No community discussion yet for this question.

Full SSCP Practice