SY0-301 · Question #115
A security administrator has installed a new KDC for the corporate environment. Which of the following authentication protocols is the security administrator planning to implement across the…
The correct answer is C. Kerberos. A Key Distribution Center (KDC) is the central server component of the Kerberos authentication protocol, responsible for issuing tickets used to authenticate users and services.
Question
A security administrator has installed a new KDC for the corporate environment. Which of the following authentication protocols is the security administrator planning to implement across the organization?
Options
- ALDAP
- BRADIUS
- CKerberos
- DXTACACS
How the community answered
(52 responses)- A6% (3)
- B2% (1)
- C88% (46)
- D4% (2)
Why each option
A Key Distribution Center (KDC) is the central server component of the Kerberos authentication protocol, responsible for issuing tickets used to authenticate users and services.
LDAP is a directory access protocol used for querying and modifying directory services and does not use a KDC for its operation.
RADIUS is a network access authentication protocol used primarily for dial-up and VPN access control and has no KDC component.
Kerberos is the authentication protocol that relies on a KDC to issue Ticket Granting Tickets (TGTs) and service tickets, enabling mutual authentication without transmitting passwords over the network. The KDC contains both the Authentication Service (AS) and the Ticket Granting Service (TGS), which are the two functional halves of Kerberos authentication. Installing a KDC is the defining infrastructure step when deploying Kerberos.
XTACACS is an extended version of TACACS used for device administration authentication and does not involve a Key Distribution Center.
Concept tested: Kerberos KDC role in authentication infrastructure
Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview
Topics
Community Discussion
No community discussion yet for this question.