Which Kerberos component authenticates users and issues tickets (tokens)?

Which Kerberos component authenticates users and issues tickets (tokens)?

• A. Authentication Service (AS)
• B. Ticket Granting Center (TGC)
• C. Authentication Center (AC)
• D. Key Distribution Center (KDC)

Answer: (D)

In Kerberos, the centralized authority that handles user authentication and issues tickets is the Key Distribution Center. The KDC houses two services: the Authentication Service and the Ticket Granting Service. When a user proves their identity, the Authentication Service within the KDC verifies the credentials and issues a ticket-granting ticket. That ticket is then used by the Ticket Granting Service to obtain service tickets for specific resources. This centralized role is why the KDC is the correct answer: it coordinates authentication and the distribution of tickets that prove a user’s identity to other services. The other terms aren’t the standard component you rely on for both authentication and ticket issuance. The Authentication Service is a part of the KDC, not the whole component by itself in many descriptions. The “Ticket Granting Center” is not the commonly used term (the correct one is Ticket Granting Service). The Authentication Center doesn’t exist in Kerberos terminology.

In Kerberos, the centralized authority that handles user authentication and issues tickets is the Key Distribution Center. The KDC houses two services: the Authentication Service and the Ticket Granting Service. When a user proves their identity, the Authentication Service within the KDC verifies the credentials and issues a ticket-granting ticket. That ticket is then used by the Ticket Granting Service to obtain service tickets for specific resources. This centralized role is why the KDC is the correct answer: it coordinates authentication and the distribution of tickets that prove a user’s identity to other services.

The other terms aren’t the standard component you rely on for both authentication and ticket issuance. The Authentication Service is a part of the KDC, not the whole component by itself in many descriptions. The “Ticket Granting Center” is not the commonly used term (the correct one is Ticket Granting Service). The Authentication Center doesn’t exist in Kerberos terminology.