Certified Information Systems Security Professional CISSP · Free Practice Question Easy
Question 11
- A Protection of session keys
- B Protection from brute-force attacks
- C Redundancy
- D Communication between principals
Reveal correct answer
Correct answer: D
Explanation
Correct Answer:
D is correct. None of the principals trust each other directly; they only trust the Key Distribution Center (KDC). The KDC creates tickets to vouch for the individual principals when they need to communicate.
Incorrect Answers:
A is incorrect. Session keys are decrypted and reside on the users’ workstations, either in a cache or in a key table. An intruder can capture these keys.
B is incorrect. Kerberos is vulnerable to password guessing. The Key Distribution Center (KDC) does not know if a dictionary attack is taking place.
C is incorrect. The Key Distribution Center (KDC) can be a single point of failure. If the KDC goes down, no one can access needed resources. Redundancy is necessary for the KDC.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
