nerdexam
CompTIA

SY0-301 · Question #119

Jane, a security administrator, has been tasked with explaining authentication services to the company's management team. The company runs an active directory infrastructure. Which of the following…

The correct answer is A. Kerberos. Microsoft Active Directory uses Kerberos as its native host authentication protocol, relying on a KDC embedded within each domain controller to issue tickets for authentication.

General security concepts

Question

Jane, a security administrator, has been tasked with explaining authentication services to the company's management team. The company runs an active directory infrastructure. Which of the following solutions BEST relates to the host authentication protocol within the company's environment?

Options

  • AKerberos
  • BLeast privilege
  • CTACACS+
  • DLDAP

How the community answered

(60 responses)
  • A
    88% (53)
  • B
    3% (2)
  • C
    2% (1)
  • D
    7% (4)

Why each option

Microsoft Active Directory uses Kerberos as its native host authentication protocol, relying on a KDC embedded within each domain controller to issue tickets for authentication.

AKerberosCorrect

Active Directory integrates Kerberos v5 as its primary authentication protocol for host and user authentication within a Windows domain environment. Every Active Directory domain controller acts as a Kerberos KDC, issuing TGTs and service tickets to authenticate domain members. When a host joins an AD domain, Kerberos becomes the default protocol used for authenticating logon sessions and service access.

BLeast privilege

Least privilege is a security principle related to permission management, not an authentication protocol or service.

CTACACS+

TACACS+ is a Cisco-developed protocol used primarily for authenticating administrative access to network devices, not for host authentication in a Windows Active Directory environment.

DLDAP

LDAP is the directory access protocol used to query and update the Active Directory database, but it is not the authentication protocol - Kerberos handles authentication while LDAP handles directory lookups.

Concept tested: Kerberos as Active Directory host authentication protocol

Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview

Topics

#Kerberos#Active Directory#host authentication#AAA

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice