Exam SSCP topic 1 question 96 discussion

Kerberos primarily addresses Authentication and Authorization, which aligns with the Confidentiality and Integrity aspects of the CIA triad. Therefore, the correct answer should indeed be: A. Confidentiality and Integrity Kerberos helps to ensure that communication between entities remains confidential and that the data being transmitted maintains its integrity.

KRB does not address availability, so the answer B is incorrect. However, it addresses confidentiality and integrity which is the "best" answer.

Kerberos primarily addresses: B. Authentication and Availability Kerberos is a network authentication protocol designed to provide strong authentication for client-server applications by using secret-key cryptography. It focuses on verifying the identities of entities (authentication) and ensuring the availability of services while protecting against various security threats like eavesdropping or replay attacks.

I would agree that Kerberos's main role is Authentication, but it doesn't really address availability. But it does provide Confidentiality and Integrity via encryption.

Kerberos primarily addresses Authentication and, to some extent, aspects of Authorization (Access Control) in a networked environment.