Questions And Answers Verified 100% Correct
This is a proprietary version of PAP, it is somewhat more secure then PAP because username
and passwords are both encrypted when they are sent over the network. - answer -S-PAP (Shiva
Password Authentication Protocol)
After a connecting is established the authenticator will "challenge" the requestor.
The requestor responds with a calculated has function.
The authenticator checks the response against its own calculation of the expected hash function.
If they match the authenticator acknowledges the request, otherwise the connection is terminated.
This processes is repeated at random intervals. - answer -CHAP (Challenge-Handshake
Authentication Protocol)
Most widely used authentication protocol, mainly within Microsoft systems. Invented at MIT
and is named for the three-headed mythical dog that was reputed to guard the gates of Hades.
Uses symmetric cryptography, with authentication performed on UDP port 88 - answer
Kerberos
A server or client that Kerberos can assign tickets to - answer -Principal
This server authorizes the principal and connects them to the ticket granting server - answer
Authentication Server (AS)
This server provides tickets to the principal after they are authenticated and connected - answer
-Ticket Granting Server (TGS)
Provides the initial ticket to the principal and handles TGS requests. Typically runs both the AS
and TGS services - answer -Key Distribution Center (KDC)
, A boundary within and organization, each separate boundary has its own AS and TGS - answer
-Realm
This server grants tickets to remote realms - answer -Remote Ticket Granting Server (RTGS)
A ticket that is granted during the authentication process - answer -Ticket Granting Ticket
(TGT)
Used to authenticate to the server. Contains client identity, session key, timestamp and a
checksum. It is encrypted with the servers keys - answer -Ticket
A temporary encryption key - answer -Session Key
Proves the session keys was recently created, typically expires within five minutes - answer
Authenticator
Step 1: User sends credentials to the AS
Step 2: AS authenticates user
Step 3: The AS contacts the TGT that is sent to the users computer
Step 4: The users computer presents the TGT back to the TGS to request access to a specific
network resource. The TGS uses the AS to authenticate the ticket. if it is authentic then a
resource ticket and session key are sent to the users computer Step 5: The users presents the
ticket/session key to the resource
Step 6: The resource verifies the ticket/session key with the TGS
Step 7: The user is authorized access to the resource - answer -Kerberos Process
By itself it is not an algorithm, but uses other well established asymmetric and symmetric
algorithms. This software products was developed to make encryption and decryption readily
usable by end users.
Usually associated with email encryption