ICT 379 Preprayer || A+ Guaranteed.
What is kerberos? correct answers Kerberos is an authentication protocol that works on the basis
of tickets to allow nodes communicating over an insecure network to prove their identity to one
another in a secure matter
In Kerberos, what type of server gives authentication tickets? correct answers The ticket granting
server
In Kerberos, what does the client need to do to get a ticket from the ticket granting server?
correct answers They must get a ticket granting ticket from the key distribution server
What are two security vulnerabilies present in the use of Kerberos? correct answers Passwords
must be plaintext on the KDC, reliance on client software which may be vulnerable
What are the six steps to accessing Kerberos services? correct answers 1. Client generates
authenticator.
2. Client sends authenticator, TGT, name of server S and timestamp to TGS.
3. TGS generates a session key for the client and server S.
4. TGS generates ticket for client and server S.
5. TGS sends all of this to the client.
6. Client accesses server S using ticket and authenticator.
What is segmentation? correct answers Segmentation is the process of dividing memory into
logical units of variable lengths.
What is paging? correct answers Paging is the process of dividing memory into pages of equal
lengths.
, What is a covert channel? correct answers A covert channel is a security vulnerability that exists
when a page fault is observable.
What are three methods of controlling access to memory? correct answers Sandboxing, where
the operating system modifies the addresses it receives from user processes.
Relative addressing, where the operating system constructs the effective addresses from relative
addresses it receives from user processes.
Finally, the operating system can check whether the addresses it receives from user processes are
within given bounds.
What is perfect forward secrecy? correct answers Perfect forward secrecy is a property of public
key encryption systems which generate random public keys per session for the purposes of key
agreement which are not based on any sort of deterministic algorithm.
If implemented correctly the compromise of one message cannot lead to the compromise of
another message.
How does SSH implement forward secrecy? correct answers SSH implements forward secrecy
through the server key which is an ephemeral (generated for each execution) key that is
regenerated every hour.
What are the four steps of the SSH handshake? correct answers 1. On client connection, the
service sends two public keys. The first is the host key which authenticates the server and is non-
ephemeral. The second is the server key which is ephemeral.
2. The client verifies the key is the same as the previous connection or requests user verify on the
first connection.
What is kerberos? correct answers Kerberos is an authentication protocol that works on the basis
of tickets to allow nodes communicating over an insecure network to prove their identity to one
another in a secure matter
In Kerberos, what type of server gives authentication tickets? correct answers The ticket granting
server
In Kerberos, what does the client need to do to get a ticket from the ticket granting server?
correct answers They must get a ticket granting ticket from the key distribution server
What are two security vulnerabilies present in the use of Kerberos? correct answers Passwords
must be plaintext on the KDC, reliance on client software which may be vulnerable
What are the six steps to accessing Kerberos services? correct answers 1. Client generates
authenticator.
2. Client sends authenticator, TGT, name of server S and timestamp to TGS.
3. TGS generates a session key for the client and server S.
4. TGS generates ticket for client and server S.
5. TGS sends all of this to the client.
6. Client accesses server S using ticket and authenticator.
What is segmentation? correct answers Segmentation is the process of dividing memory into
logical units of variable lengths.
What is paging? correct answers Paging is the process of dividing memory into pages of equal
lengths.
, What is a covert channel? correct answers A covert channel is a security vulnerability that exists
when a page fault is observable.
What are three methods of controlling access to memory? correct answers Sandboxing, where
the operating system modifies the addresses it receives from user processes.
Relative addressing, where the operating system constructs the effective addresses from relative
addresses it receives from user processes.
Finally, the operating system can check whether the addresses it receives from user processes are
within given bounds.
What is perfect forward secrecy? correct answers Perfect forward secrecy is a property of public
key encryption systems which generate random public keys per session for the purposes of key
agreement which are not based on any sort of deterministic algorithm.
If implemented correctly the compromise of one message cannot lead to the compromise of
another message.
How does SSH implement forward secrecy? correct answers SSH implements forward secrecy
through the server key which is an ephemeral (generated for each execution) key that is
regenerated every hour.
What are the four steps of the SSH handshake? correct answers 1. On client connection, the
service sends two public keys. The first is the host key which authenticates the server and is non-
ephemeral. The second is the server key which is ephemeral.
2. The client verifies the key is the same as the previous connection or requests user verify on the
first connection.
