Cybersecurity Principles & Protocols Flashcards

Which authentication protocol uses a Key Distribution Center to issue time-stamped tickets in Windows domains?

Answer: Kerberos

Kerberos uses a KDC to issue ticket-granting tickets and service tickets, and it relies on synchronized clocks.

Why might an administrator choose TACACS+ over RADIUS for managing network device logins?

Answer: TACACS+ encrypts the entire packet body and separates AAA functions

TACACS+ runs over TCP 49, encrypts the whole payload, and handles authentication, authorization, and accounting separately.

In IEEE 802.1X port-based authentication, what role does a network switch play?

Answer: Authenticator

The switch acts as the authenticator, relaying credentials between the supplicant and the RADIUS authentication server.

WPA3-Personal replaces the WPA2 pre-shared key handshake with which method to resist offline dictionary attacks?

Answer: SAE

Simultaneous Authentication of Equals (SAE) protects against offline password guessing even if the handshake is captured.

Which login method qualifies as true multifactor authentication?

Answer: A password and a hardware token code

MFA requires factors from different categories, here something you know plus something you have.

An attacker captures a valid authentication message and resends it later to gain access. Which control best prevents this?

Answer: Timestamps or nonces in the authentication exchange

Timestamps and one-time nonces make captured messages invalid when they are replayed.

Which mechanism provides non-repudiation, so a sender cannot later deny sending a message?

Answer: Digital signatures

A digital signature ties a message to the sender's private key, which proves origin.