SY0-301 · Question #119
Jane, a security administrator, has been tasked with explaining authentication services to the company's management team. The company runs an active directory infrastructure. Which of the following…
The correct answer is A. Kerberos. Microsoft Active Directory uses Kerberos as its native host authentication protocol, relying on a KDC embedded within each domain controller to issue tickets for authentication.
Question
Jane, a security administrator, has been tasked with explaining authentication services to the company's management team. The company runs an active directory infrastructure. Which of the following solutions BEST relates to the host authentication protocol within the company's environment?
Options
- AKerberos
- BLeast privilege
- CTACACS+
- DLDAP
How the community answered
(60 responses)- A88% (53)
- B3% (2)
- C2% (1)
- D7% (4)
Why each option
Microsoft Active Directory uses Kerberos as its native host authentication protocol, relying on a KDC embedded within each domain controller to issue tickets for authentication.
Active Directory integrates Kerberos v5 as its primary authentication protocol for host and user authentication within a Windows domain environment. Every Active Directory domain controller acts as a Kerberos KDC, issuing TGTs and service tickets to authenticate domain members. When a host joins an AD domain, Kerberos becomes the default protocol used for authenticating logon sessions and service access.
Least privilege is a security principle related to permission management, not an authentication protocol or service.
TACACS+ is a Cisco-developed protocol used primarily for authenticating administrative access to network devices, not for host authentication in a Windows Active Directory environment.
LDAP is the directory access protocol used to query and update the Active Directory database, but it is not the authentication protocol - Kerberos handles authentication while LDAP handles directory lookups.
Concept tested: Kerberos as Active Directory host authentication protocol
Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview
Topics
Community Discussion
No community discussion yet for this question.