SY0-501 · Question #280
A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?
The correct answer is B. It uses tickets to identify authenticated users. The question asks for a feature unique to Kerberos when compared to RADIUS and Diameter, focusing on its distinct authentication mechanism.
Question
A security administrator is evaluating three different services: radius, diameter, and Kerberos. Which of the following is a feature that is UNIQUE to Kerberos?
Options
- AIt provides authentication services
- BIt uses tickets to identify authenticated users
- CIt provides single sign-on capability
- DIt uses XML for cross-platform interoperability
How the community answered
(35 responses)- A17% (6)
- B71% (25)
- C9% (3)
- D3% (1)
Why each option
The question asks for a feature unique to Kerberos when compared to RADIUS and Diameter, focusing on its distinct authentication mechanism.
RADIUS and Diameter also provide authentication services, making this feature not unique to Kerberos.
Kerberos uses a ticket-based system, specifically a Ticket Granting Ticket (TGT) and service tickets, to prove a user's identity to various services without re-entering credentials for each, a method distinct from the challenge-response or attribute-value pair exchanges of RADIUS and Diameter.
While Kerberos provides single sign-on, RADIUS and Diameter can also be integral components in implementing SSO solutions, meaning it is not unique to Kerberos.
Kerberos does not primarily use XML for its core operations or cross-platform interoperability; Diameter, however, can use XML for certain attribute definitions, making this statement inaccurate for Kerberos and not a unique feature anyway.
Concept tested: Kerberos authentication mechanism uniqueness (tickets)
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/kerberos-protocol
Topics
Community Discussion
No community discussion yet for this question.