nerdexam
CompTIA

SY0-501 · Question #280

A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

The correct answer is B. It uses tickets to identify authenticated users. The question asks for a feature unique to Kerberos when compared to RADIUS and Diameter, focusing on its distinct authentication mechanism.

Submitted by valeria.br· Mar 4, 2026General security concepts

Question

A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?

Options

  • AIt provides authentication services
  • BIt uses tickets to identify authenticated users
  • CIt provides single sign-on capability
  • DIt uses XML for cross-platform interoperability

How the community answered

(35 responses)
  • A
    17% (6)
  • B
    71% (25)
  • C
    9% (3)
  • D
    3% (1)

Why each option

The question asks for a feature unique to Kerberos when compared to RADIUS and Diameter, focusing on its distinct authentication mechanism.

AIt provides authentication services

RADIUS and Diameter also provide authentication services, making this feature not unique to Kerberos.

BIt uses tickets to identify authenticated usersCorrect

Kerberos uses a ticket-based system, specifically a Ticket Granting Ticket (TGT) and service tickets, to prove a user's identity to various services without re-entering credentials for each, a method distinct from the challenge-response or attribute-value pair exchanges of RADIUS and Diameter.

CIt provides single sign-on capability

While Kerberos provides single sign-on, RADIUS and Diameter can also be integral components in implementing SSO solutions, meaning it is not unique to Kerberos.

DIt uses XML for cross-platform interoperability

Kerberos does not primarily use XML for its core operations or cross-platform interoperability; Diameter, however, can use XML for certain attribute definitions, making this statement inaccurate for Kerberos and not a unique feature anyway.

Concept tested: Kerberos authentication mechanism uniqueness (tickets)

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/kerberos-protocol

Topics

#Kerberos#ticket-based authentication#authentication protocols#SSO

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice