IT Cybersecurity Principles & Protocols 5

Question 1

Which authentication protocol uses a Key Distribution Center to issue time-stamped tickets in Windows domains?

Accepted Answer

Kerberos

Answer

Kerberos uses a KDC to issue ticket-granting tickets and service tickets, and it relies on synchronized clocks.

Question 2

Why might an administrator choose TACACS+ over RADIUS for managing network device logins?

Accepted Answer

TACACS+ encrypts the entire packet body and separates AAA functions

Answer

TACACS+ runs over TCP 49, encrypts the whole payload, and handles authentication, authorization, and accounting separately.

Question 3

In IEEE 802.1X port-based authentication, what role does a network switch play?

Accepted Answer

Authenticator

Answer

The switch acts as the authenticator, relaying credentials between the supplicant and the RADIUS authentication server.

Question 4

WPA3-Personal replaces the WPA2 pre-shared key handshake with which method to resist offline dictionary attacks?

Accepted Answer

SAE

Answer

Simultaneous Authentication of Equals (SAE) protects against offline password guessing even if the handshake is captured.

Question 5

Which login method qualifies as true multifactor authentication?

Accepted Answer

A password and a hardware token code

Answer

MFA requires factors from different categories, here something you know plus something you have.

IT - Information Technology Certified Practice Test