Discuss ISC2 SSCP Exam Topic 4 Question 102

Kerberos is vulnerable to replay in which of the following circumstances?

AWhen a private key is compromised within an allotted time window.

BWhen a public key is compromised within an allotted time window.

CWhen a ticket is compromised within an allotted time window.

DWhen the KSD is compromised within an allotted time window.

Suggested Answer: C

Replay can be accomplished on Kerberos if the compromised tickets are used within an allotted time window.

The security depends on careful implementation:enforcing limited lifetimes for authentication credentials minimizes the threat of of replayed credentials, the KDC must be physically secured, and it should be hardened, not permitting any non-kerberos activities.

Official ISC2 Guide to the CISSP, 2007 Edition, page 184

also see:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 42.

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

33 comments · newest first

Dahlia 10 months ago

D is a possibility too, but I lean towards C.

Lenna 10 months ago

Wait, are we sure about C? Seems too easy.

Maryann 10 months ago

It's definitely C, tickets are key in Kerberos!

Antione 10 months ago

Public keys aren't the issue here, so B is out.

Viva 10 months ago

I thought it was A at first, but C makes more sense.

Howard 11 months ago

I feel like I read that the KSD isn't usually a factor in replay attacks, so I would lean towards C as the answer.

Melina 11 months ago

I’m a bit confused. I thought replay attacks could happen with private keys as well. Is it A or C?

Elly 11 months ago

I remember practicing a question similar to this, and I think it was about compromised tickets too. C sounds right to me.

Johana 11 months ago

I think replay attacks are mostly about ticket vulnerabilities, so maybe it's C? But I'm not entirely sure.

Latia 12 months ago

I think the key here is understanding how Kerberos works and the different components that could be compromised. Based on that, I'm going to go with C - when a ticket is compromised within an allotted time window.

Paris 12 months ago

I'm a little confused by this question. I know Kerberos is vulnerable to replay attacks, but I'm not sure I fully understand the different ways that could happen. I'll have to review my notes and try to reason through this.

Claudia 12 months ago

Okay, let me see. I remember from the lectures that Kerberos uses tickets to authenticate users, so I'm guessing the answer has something to do with those tickets being compromised. I'll go with C.

Coletta 1 year ago

Hmm, I'm a bit unsure about this one. I know Kerberos is vulnerable to replay attacks, but I'm not sure which specific circumstance the question is asking about. I'll have to think this through carefully.

Anisha 1 year ago

This one seems pretty straightforward. I think the answer is C - when a ticket is compromised within an allotted time window.

Cecilia 1 year ago

I think Reiko might be right, because if the private key is compromised, it could lead to replay attacks.

Reiko 1 year ago

I'm not sure, but I think it could also be A) When a private key is compromised within an allotted time window.

Iraida 1 year ago

I agree with Tamar, because the ticket is what is used for authentication in Kerberos.

Tamar 1 year ago

I think the answer is C) When a ticket is compromised within an allotted time window.

Gerald 1 year ago

Fear not, fellow candidates! I, Gerald, shall guide you to the promised land of Kerberos security. The answer, of course, is C. Tickets are the Achilles' heel of this mighty authentication protocol.

Azalee 1 year ago

↳ replying to Gerald

D) When the KSD is compromised within an allotted time window.

Catarina 1 year ago

↳ replying to Gerald

C) When a ticket is compromised within an allotted time window.

Percy 1 year ago

↳ replying to Gerald

B) When a public key is compromised within an allotted time window.

Isaac 1 year ago

↳ replying to Gerald

A) When a private key is compromised within an allotted time window.

Sylvie 1 year ago

Ah, the age-old Kerberos dilemma. If only we could all be as secure as a Kerberos ticket, am I right? C is the answer, no doubt about it.

Frederic 1 year ago

C is the way to go, folks. Kerberos may be secure, but even it can't escape the dreaded ticket compromise. Time to brush up on my Kerberos trivia!

Noel 1 year ago

Hmm, I was going to say D, but now I'm not so sure. Gotta love these Kerberos questions, they really keep you on your toes!

Zona 1 year ago

↳ replying to Noel

I think it's C too, replay attacks can be tricky to spot.

Quentin 1 year ago

↳ replying to Noel

C) When a ticket is compromised within an allotted time window.

Sabra 1 year ago

↳ replying to Noel

A) When a private key is compromised within an allotted time window.

Kenneth 1 year ago

I think the answer is C. A ticket being compromised within a certain time window is the vulnerability that Kerberos is susceptible to.

Oneida 1 year ago

↳ replying to Kenneth

I'm not sure, but I think it's D. The KSD being compromised within the time window seems like a vulnerability.

Louvenia 1 year ago

↳ replying to Kenneth

Actually, I think it's A. A compromised private key within the time window is the vulnerability.

Polly 1 year ago

↳ replying to Kenneth

I agree, the answer is C. A compromised ticket within the time window is the vulnerability.

ISC2 SSCP Exam - Topic 4 Question 102 Discussion