ISC Exam Questions

Which of the following is not true of Kerberos?

Which of the following is not true of Kerberos?

A.
It is not based on symmetric cryptography.

B.
It is a proprietary protocol.

C.
It is an authentication protocol.

D.
Its security relies on the integrity of the KDC.

Explanation:
Kerberos is an open authentication protocol (not a proprietary one) that is based onsymmetric cryptography. It is used because the individual principals do not trusteach other enough to communicate directly. The KDC holds all of the secret keys andit vouches for the identity of the other principals, and has to be completelyprotected from corruption.