Which of the following statements pertaining to Kerberos is TRUE?

The correct answer is A. Kerberos does not address availability. Kerberos does not address availability - this is TRUE and a well-known limitation. Kerberos relies on a central Key Distribution Center (KDC). If the KDC becomes unavailable, users cannot authenticate and access to network resources is denied, making it a single point of failure

Submitted by jian89· Apr 18, 2026Network and Communications Security

Question

Which of the following statements pertaining to Kerberos is TRUE?

Options

AKerberos does not address availability
BKerberos does not address integrity
CKerberos does not make use of Symmetric Keys
DKerberos cannot address confidentiality of information

How the community answered

(40 responses)

A
90% (36)
B
3% (1)
C
3% (1)
D
5% (2)

Explanation

Kerberos does not address availability - this is TRUE and a well-known limitation. Kerberos relies on a central Key Distribution Center (KDC). If the KDC becomes unavailable, users cannot authenticate and access to network resources is denied, making it a single point of failure for availability. The other statements are false: Kerberos does address integrity through its ticket-based validation system (B is false); Kerberos is built entirely on symmetric key cryptography - both the Authentication Server and Ticket Granting Server use shared secret keys (C is false); and Kerberos can provide confidentiality through session keys that encrypt communications (D is false).

Topics

#Kerberos#Authentication Protocols#Availability#Symmetric Cryptography

Community Discussion

No community discussion yet for this question.

Full SSCP Practice