Jane, a security administrator, has been tasked with explaining authentication services to the company’s
management team. The company runs an active directory infrastructure. Which of the following solutions
BEST relates to the host authentication protocol within the company’s environment?

A.
Kerberos

B.
Least privilege

C.
TACACS+

D.
LDAP

Explanation:
Kerberos was accepted by Microsoft as the chosen authentication protocol for Windows 2000 and Active
Directory domains that followed.
Incorrect Answers:
B: Least privilege requires that users are allowed only the minimum required access, permissions, and
privileges necessary to complete their work tasks. Furthermore, it is not an authentication protocol.
C: TACACS+ is a protocol that uses the authentication, authorization, and accounting (AAA) architecture.
It is used for remote authentication.
D: LDAP allows clients to access resources within a directory service.

http://en.wikipedia.org/wiki/NT_LAN_Manager
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 82, 271, 273