Exam SSCP topic 1 question 144 discussion

The statement that is TRUE regarding Kerberos is: C. Kerberos does not make use of Symmetric Keys Kerberos primarily uses symmetric key cryptography for secure communication between entities. It employs a trusted third-party Key Distribution Center (KDC) to issue session keys to authenticated entities for secure communication, making extensive use of symmetric keys for encryption and authentication purposes.

The statement that is TRUE is: B. Kerberos does not address integrity. While Kerberos primarily focuses on authentication and secure key distribution, it does not inherently address data integrity. Data integrity ensures that data remains accurate and unaltered during transmission or storage. While Kerberos establishes secure communication channels for authentication purposes, it does not provide mechanisms to guarantee the integrity of the data being transmitted or stored. The other options: A. Kerberos does address availability by providing a way for authorized users to access resources and services. C. Kerberos extensively uses Symmetric Keys for secure communication between parties. D. Kerberos does address confidentiality by ensuring that authentication information and tickets are encrypted to prevent eavesdropping.