Kerberos is an authentication protocol that provides which credential to an authority?

Kerberos is an authentication protocol that provides which credential to an authority?

• A. User name and password
• B. Digital certificates
• C. Biometric data
• D. Symmetric keys

Answer: (A)

Kerberos relies on you proving knowledge of a secret to a trusted authority in order to obtain the right to access services. When you first authenticate, you present your identity (your user principal) and a secret derived from your password. The Kerberos Authentication Service uses that secret to verify you, then issues a ticket (and a session key) that lets you access other services without sending your password again. That’s why the credential you provide to the authority is a username and a password. The password-derived secret is what the Kerberos server uses to confirm your identity and issue the initial ticket. Digital certificates aren’t part of standard Kerberos authentication (though some extensions like PKINIT exist). Biometric data isn’t used as the credential in the classic Kerberos flow, and while symmetric keys are involved in how tickets are protected, you don’t hand a raw symmetric key to the KDC as your credential.

Kerberos relies on you proving knowledge of a secret to a trusted authority in order to obtain the right to access services. When you first authenticate, you present your identity (your user principal) and a secret derived from your password. The Kerberos Authentication Service uses that secret to verify you, then issues a ticket (and a session key) that lets you access other services without sending your password again.

That’s why the credential you provide to the authority is a username and a password. The password-derived secret is what the Kerberos server uses to confirm your identity and issue the initial ticket.

Digital certificates aren’t part of standard Kerberos authentication (though some extensions like PKINIT exist). Biometric data isn’t used as the credential in the classic Kerberos flow, and while symmetric keys are involved in how tickets are protected, you don’t hand a raw symmetric key to the KDC as your credential.