Which of the following two components does Kerberos Key Distribution Center (KDC) consist of? Each correct answer represents a complete solution. Choose two.
Answer(s): B,D
Kerberos Key Distribution Center (KDC) consists of the following two components:Authentication service: This service issues ticket-granting tickets (TGTs) that are good for admission to the ticket-granting service (TGS). Before network clients can get tickets for services, they must obtain a TGT from the authentication service.Ticket-granting service: This service issues tickets that are used for admission to other services in its own domain or to access the ticket-granting service of a trusted domain.
Kerberos is a computer network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner.Which of the following statements are true about the Kerberos authentication scheme? Each correct answer represents a complete solution. Choose all that apply.
Answer(s): A,B,D
Kerberos is a computer network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Kerberos builds on symmetric key cryptography and requires a trusted third party. Kerberos uses as its basis the Needham-Schroeder protocol. It makes use of a trusted third party, termed a key distribution center (KDC), which consists of two logically separate parts:Authentication Server (AS)Ticket Granting Server (TGS)Kerberos works on the basis of tickets, which serve to prove the identity of users. The KDC maintains a database of secret keys; each entity on the network, whether a client or a server, shares a secret key known only to itself and to the KDC.Knowledge of this key serves to prove an entity's identity. For communication between two entities, the KDC generates a session key, which they can use to secure their interactions.
An organization is seeking to implement a hot site and wants to maintain a live database server at the backup site.Which of the following solutions will be the best for the organization?
Answer(s): C
Remote mirroring is the most advanced and popular database backup solution. It maintains a live database server at the backup site. The remote server receives copies of the database modifications at that time when these modifications are applied to the production server. This production server is placed at the primary site. Thus, the mirrored server is ready to take over an operational role at a moment's notice.Remote mirroring is a useful strategy for those organizations that are seeking to implement a hot site.While considering the feasibility of a remote mirroring solution, always be sure to take into account the infrastructure and personnel costs that are required for supporting the mirrored server as well as the processing overhead. The processing overhead is added to each database transaction on the mirrored server.Answer options A, B are incorrect. Electronic vaulting and remote journaling can be used for database backup, but both of them cannot work with the live database server.
A helpdesk technician received a phone call from an administrator at a remote branch office. The administrator claimed to have forgotten the password for the root account on UNIX servers and asked for it. Although the technician didn't know any administrator at the branch office, the guy sounded really friendly and since he knew the root password himself, he supplied the caller with the password.What type of attack has just occurred?
Answer(s): A
Any process whereby the attacker attempts to get a person to divulge security information is called social engineering attack. This is a very common tactic.
You work as a Network Administrator of a TCP/IP network. You are having DNS resolution problem.Which of the following utilities will you use to diagnose the problem?
Answer(s): D
NSLOOKUP is a tool for diagnosing and troubleshooting Domain Name System (DNS) problems. It performs its function by sending queries to the DNS server and obtaining detailed responses at the command prompt. This information can be useful for diagnosing and resolving name resolution issues, verifying whether or not the resource records are added or updated correctly in a zone, and debugging other server-related problems. This tool is installed along with the TCP/IP protocol through the Control Panel. Answer option B is incorrect. The ping command-line utility is used to test connectivity with a host on a TCP/IP-based network. This is achieved by sending out a series of packets to a specified destination host. On receiving the packets, the destination host responds with a series of replies. These replies can be used to determine whether or not the network is working properly. Answer option C is incorrect. IPCONFIG is a command-line utility used to display current TCP/IP network configuration values and update or release the Dynamic Host Configuration Protocol (DHCP) allocated leases. It is also used to display, register, or flush Domain Name System (DNS) names.Answer option A is incorrect. TRACERT is a route-tracing Windows utility that displays the path an IP packet takes to reach the destination. It shows the Fully Qualified Domain Name (FQDN) and the IP address of each gateway along the route to the remote host.
Post your Comments and Discuss ISC2 ISSAP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ISSAP content, but please register or login to continue.