What is the role of Kerberos in network security?

• A. To provide secure authentication for users and services
• B. To manage DNS records
• C. To monitor network performance
• D. To perform IP routing decisions

Answer: (A)

Kerberos is an authentication framework for a network. It provides secure authentication for users and services by using a ticket-based system managed by a trusted Key Distribution Center. A user proves their identity to the KDC once and gets a ticket-granting ticket, which can be used to request service tickets for accessing various network services. The tickets are encrypted, so passwords are never sent over the network, and mutual authentication ensures both the user and the service verify each other before access is granted. This centralized, time-bound approach reduces the risk of credential theft and replay attacks. Kerberos focuses on authentication rather than DNS management, network monitoring, or routing decisions, which are handled by other mechanisms. It does rely on synchronized clocks and a functioning KDC, and it does not by itself perform authorization beyond proving identity.