Module 13 - Authentication Methods & Services - Q&A

Question 1

Which of the following allows a user to use one set of credentials throughout an enterprise?
A. TACACS
B. RADIUS
C. Single Sign-on
D. TACACS +

Answer 1

C. Single sign-on allows a user to use one set of credentials throughout an enterprise to access various resources without having to reauthenticate with a different set of credentials.

Question 2

Which of the following would use a SHA-2 algorithm to generate a password that is used for only one session?
A. Kerberos Authentication Service
B. HOTP
C. TOTP
D. Kerberos Ticket-Granting Service

Answer 2

B. The HMAC-based One-Time Password (HOTP) algorithm uses hashing algorithms, such as SHA, to generate one-time passwords.

Question 3

Which of the following authentication protocols sends user and password information in clear text?
A. PAP
B. CHAP
C. MS-CHAP v2
D. MS-CHAP

Answer 3

A. The Password Authentication Protocol (PAP) sends user and password information in clear text and should not be used.

Question 4

Which of the following authentication protocols was the first of its kind to offer challenge-response mechanisms for protecting user credentials sent over a network?
A. PPP
B. Kerberos
C. PAP
D. CHAP

Answer 4

D. The Challenge Handshake Authentication Protocol (CHAP) was the first authentication protocol designed to offer challenge-response mechanisms for protecting user credentials sent over a network.

Question 5

Under which of the following circumstances would a Windows host use Kerberos instead of NTLM v2 to authenticate users?
A. Authenticating to a server using only an IP address
B. Authenticating to a modern Windows Active Directory domain
C. Authenticating to a different Active Directory forest with legacy trusts enabled
D. Authenticating to a server in a Windows workgroup

Answer 5

B. When authenticating to a modern Windows Active Directory domain, Windows uses Kerberos as its authentication protocol by default.

Question 6

Which of the following issues a service ticket to a user in a Kerberos realm?
A. Authentication Service
B. Server Service
C. Ticket-Granting Service
D. Key Distribution Center

Answer 6

C. The Ticket-Granting Service issues a service ticket to a user in a Kerberos realm.

Question 7

Which of the following remote authentication protocols uses UDP ports 1812 and 1813?
A. L2TP
B. TACACS +
C. TACACS
D. RADIUS

Answer 7

D. RADIUS uses UDP ports 1812 and 1813.

Question 8

All of the following are characteristics of the RADIUS authentication protocol, except:
A. It encrypts data between the RADIUS client and the remote host.
B. It uses UDP port 1812 for authentication and authorization.
C. It supports both PAP and CHAP.
D. The RADIUS client is the network access server that requests authentication information from the RADIUS server.

Answer 8

A. RADIUS does not encrypt data between the RADIUS client and the remote host.

Question 9

Which of the following remote authentication protocols can use both Kerberos and EAP, as well as multifactor authentication?
A. RADIUS
B. TACACS +
C. TACACS
D. PPTP

Answer 9

B. TACACS + supports both Kerberos and EAP, as well as multifactor authentication.

Question 10

Which of the following are characteristics of the Point-to-Point Tunneling Protocol (PPTP)? (Choose two.)
A. Uses TCP port 1723
B. Uses TCP port 1701
C. Uses MPPE as its encryption protocol
D. Uses IPsec as its encryption protocol Answers

Answer 10

A, C. PPTP uses TCP port 1723 as well as MPPE for its security protocol and encryption mechanism.