Exam SSCP topic 1 question 98 discussion

From previous similar questions.

Both the Kerberos protocol and SESAME are vulnerable to potential attacks, including: A. timeslot replay Replay attacks involve intercepting and re-transmitting valid data, such as tickets or authentication tokens, to gain unauthorized access. This vulnerability is not specific to Kerberos alone but is also a concern in protocols like SESAME.

I guess password and key are different in that A password is not as long as a key normally. And A Password commonly isn't used for the encryption, but in SESAME it uses both A password & encryption, so a password is easier to guess.

Symmetric key guessing Like the Kerberos protocol, the SESAME (Secure European System for Applications in a Multi-vendor Environment) protocol is also subject to symmetric key guessing attacks. Both Kerberos and SESAME use symmetric encryption for authentication and secure communication. In a symmetric key guessing attack, an attacker tries to guess the secret symmetric encryption key, which could allow them to impersonate a legitimate user or gain unauthorized access to protected resources. These attacks typically involve exhaustive searching or other techniques to guess the key.

Isn’t this A?