In which scenario are PKI and Kerberos commonly used together?

Using PKI certificates to replace all Kerberos tickets

Using smart card certificates to enable Kerberos authentication in an enterprise

Using Kerberos tickets to encrypt web traffic over the internet

Using Kerberos to issue certificates to users

What is the role of a trust chain in certificate validation?

It encrypts the certificate during transmission

It provides a list of all certificates issued by the CA

It ensures that the certificate's private key is kept secure

It allows a certificate to be traced back to a trusted root CA through intermediate CAs

A user in a Kerberos realm reports that they are prompted for their password every time they access a new network resource, even though they have already authenticated. The user's TGT is still valid. What is the most likely reason for this behavior?

The user's clock is out of sync with the KDC

The KDC is not issuing service tickets

The user's TGT is not being cached by the client

The user's password has expired

A certificate authority has issued a certificate that is now suspected of being used by an unauthorized party. The CA administrator needs to invalidate the certificate immediately. What should the administrator do?

Delete the certificate from the repository

Wait for the certificate to expire naturally

Issue a new certificate with the same public key

Add the certificate to the CRL and publish it to the repository

EC-CouncilCertified Encryption Specialist

Domain 4Objective 2

PKI Infrastructure and Kerberos Authentication ECES Practice Questions (Page 7)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 31–35

31foundation · easy
Which entity in a Public Key Infrastructure is responsible for verifying the identity of an applicant before a certificate is issued?
Select an answer first
32foundation · easy
In which scenario are PKI and Kerberos commonly used together?
Select an answer first
33foundation · easy
What is the role of a trust chain in certificate validation?
Select an answer first
34application · medium
A user in a Kerberos realm reports that they are prompted for their password every time they access a new network resource, even though they have already authenticated. The user's TGT is still valid. What is the most likely reason for this behavior?
Select an answer first
35application · medium
A certificate authority has issued a certificate that is now suspected of being used by an unauthorized party. The CA administrator needs to invalidate the certificate immediately. What should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.