What is a key difference between PKI and Kerberos in terms of authentication?

PKI uses asymmetric cryptography, while Kerberos primarily uses symmetric cryptography

PKI uses tickets, while Kerberos uses certificates

PKI is used only for encryption, while Kerberos is used only for authentication

PKI requires a central KDC, while Kerberos uses a distributed trust model

A security team is designing a PKI for a high-security environment. They need to ensure that a compromised issuing CA does not allow an attacker to forge certificates for other purposes. What is the most effective control?

Rely on OCSP to detect forged certificates

Use a single issuing CA with a strong HSM

Use a longer key length for the issuing CA

Use separate issuing CAs for different certificate purposes (e.g., code signing, TLS, email)

In the Kerberos authentication flow, what is the first step a client performs to obtain a Ticket Granting Ticket (TGT)?

Send a request directly to the target service

Send an authentication request to the Authentication Service (AS)

Send a request to the Ticket Granting Service (TGS) for a service ticket

Send a request to the Key Distribution Center (KDC) for a session key

How does cross-realm trust enable a user in Realm A to access a service in Realm B?

By allowing the user to authenticate directly to the service in Realm B without any tickets

By using the same password for both realms

By replicating all user accounts from Realm A to Realm B

By allowing the KDC of Realm A to issue a TGT that is recognized by the KDC of Realm B

EC-CouncilCertified Encryption Specialist

Domain 4Objective 2

PKI Infrastructure and Kerberos Authentication ECES Practice Questions (Page 8)

Part of the Applications of Cryptography domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 36–40

36foundation · easy
What is a key difference between PKI and Kerberos in terms of authentication?
Select an answer first
37foundation · easy
Which component of a PKI is responsible for publishing certificates and certificate revocation lists so that they can be retrieved by users?
Select an answer first
38expert · hard
A security team is designing a PKI for a high-security environment. They need to ensure that a compromised issuing CA does not allow an attacker to forge certificates for other purposes. What is the most effective control?
Select an answer first
39foundation · easy
In the Kerberos authentication flow, what is the first step a client performs to obtain a Ticket Granting Ticket (TGT)?
Select an answer first
40foundation · easy
How does cross-realm trust enable a user in Realm A to access a service in Realm B?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECES” is a trademark of its owner, used for identification only.