IBM Certification Exams

専門家の解説した1Y0-264 Q&As

execvews — Fri, 19 Dec 2008 03:40:03 +0000

専門家の解説した1Y0-264 Q&As
試験番号/コード：1Y0-264
試験名：Citrix Presentation Server 4.5: Support Exam

あなたの職業ライフとCitrix認定の道でCitrix認定 1Y0-264「専門家の解説した1Y0-264 Q & As」認定試験は核心とされています。本当の1Y0-264答案をまだ捜しますか。Pass4sureはあなたの絶好の選択です。Pass4sureの1Y0-264テストエンジンを使用なら、1Y0-264のブレインダンプのサイト内容を期待あなたにとっては、問題と答案だけでなく、合格と精確の説明も手に入ります。そのため、あ=なたは試験情報をしっかりと把握できます。1Y0-264練習資料を使用して、初めてのチャレンジで1Y0-264を通過できるとpass4sureが保証します。

1. Scenario: An administrator recently installed Presentation Server in a pilot environment and has not yet made any modifications to the default settings for the farm properties. The pilot user group includes technical employees from several regional offices and the headquarters location. Users who access the pilot environment from wireless connections report that their screens freeze on occasion and an hourglass appears. A few seconds after the hourglass appears, they lose their connection.

The administrator should identify the issue affecting the environment by checking if __________. (Choose the correct phrase to complete the sentence.)

A.Session Reliability is disabled

B.Auto Client Reconnect is enabled

C.the time to keep broken sessions active is sufficient

D.Access Control has been allowed for any connection MB2-632

Answer: C

2. Scenario: Users report that connections to the Presentation Server farm intermittently fail. The administrator finds that impacted users are not located in any particular location or accessing any specific application. Users who access the Presentation Server farm through Program Neighborhood are not affected, but those who access the Presentation Server farm through Web Interface are experiencing this issue approximately 25% of the time.

A likely cause of this problem is that the __________ Service on one of the four load balanced servers running Presentation Server has failed. (Choose the correct option to complete the sentence.) 350-001

A.IMA

B.ICA

C.XML

D.SMA

Answer: C

3. Scenario: An administrator installed the License Management Console on a different server than the License Server after installing Web Interface. The administrator needs to make sure the correct port number is being used for the License Management Console.

What is the correct port number for the License Management Console?

A.1494

B.1604

C.8082

D.27000

Answer: C

4. Scenario: Users in a large organization are encountering problems when they attempt to open a published application on the server running Presentation Server. The administrator verifies the problem and determines that multiple instances of the application cannot be run simultaneously.

How should the administrator address this issue? 642-072

A.Limit the user to one application session.

B.Stream the application to the user desktop.

C.Increase the set CPU priority level for the published application.

D.Configure Content Redirection using the Program Neighborhood Agent.

Answer: B

5. Users in different time zones have notified an administrator of a Presentation Server environment that the time displayed on their applications is incorrect.

How can the administrator correct this issue?

A.Configure the Client Time Zone (CTZ) rule.

B.Configure local time estimation for all users.

C.Enable the time zone rule for the server in the policy.

D.Disable the time zone rule Do not use client local time in the policy. 000-078

Answer: D

6. When configuring a Microsoft SQL replicated environment in an existing farm, which command does an administrator need to run?

A.DSMAINT CONFIG

B.DSMAINT MIGRATE

C.DSMAINT FAILOVER

D.DSMAINT PUBLISHSQLDS

Answer: D

7. An administrator has received several calls about applications not launching when users try to use Application Streaming to the desktop.

Which two issues would cause this problem? (Choose two.)

A.The .ICA file is corrupted.

B.The .RAD file is corrupted.

C.The user does not have access to the file share.

D.The user is running an old version of the Web client.

Answer: BC

8. A user is trying to gain off-line access to a streamed application using only Program Neighborhood Agent. However, the user is unable to connect.

What is causing this issue?

A.The Web Client is not installed on the user’s computer.

B.The Streaming Client is not installed on the user’s computer.

C.The user is trying to launch the application from Web Interface.

D.The user is trying to launch the application from Program Neighborhood. 642-524

Answer: B

9. An administrator received phone calls from users who are unable to bypass authentication when they log onto their disconnected sessions.

What is the reason for this issue?

A.NTLM v2 is not enabled in Active Directory.

B.The administrator did not enable the Streaming Client trust.

C.Smart Card authentication was not enabled on the Web Interface site.

D.The administrator did not set a policy for the application delivery method.

Answer: B

10. Scenario: An administrator has set up off-line access to specific applications for certain users. The administrator is now testing the setup and is unable to connect to the applications.

Which step does the administrator need to take to resolve this issue?

A.Configure off-line users at the farm level.

B.Reconfigure the License Server to use off-line licenses. EC0-349

C.Configure applications for off-line use at the server level.

D.Purchase off-line licenses for the users within the company.

Answer: A

詳細情報:646-976 70-236 70-528 HP0-841 920-221 tt0-201 350-018 70-620 70-272 642-456 jn0-400 000-418 70-431 BI0-112 156-215.65

Share This

Citrix 1Y0-259Exam Demo Citrix 1Y0-259: Citrix Presentation Server 4.5: Administration, these are some...
Pass4sure jn0-562 certification exam information The following steps demonstrate the flow of events that occur...
Pass4sure Lastly Microsoft certification exams QUESTION 11 You are a network administrator of Pass4sure ,...

816-640から816-822試験の両方に許容されるカードccentとccnaされていません

execvews — Fri, 12 Dec 2008 06:25:10 +0000

Ciscoのプッシュを強化するためのエントリレベルのCCENT認定CCNA才能のギャップを埋める

Ciscoは最近は、プロの認証プログラムは、新しいエントリーレベルの資格CCENT （ Ciscoのネットワーク技術者認定エントリー）、同社が大幅に強化され、同時に追加するには、一般的に、 CCNAを歓迎したと発表した。また、 Ciscoはまた、同じ時間コースと認定試験データでは、ネットワーク上の世界需要を満たすにローカライズされる予定だ。

として、ネットワークの経済成長、コラボレーションと相互作用し続ける人々の間ドライブ、ネットワークはますますホットになっている。 IDCによると、 2012年までに、需要と供給の間にプロの技術者とのネットワークとして、格差の40 ％と高くなると予測した。 Ciscoの巨額の投資では、トレーニングと認定プログラムは出世のネットワーク開発の分野でより多くの専門家に役立つように設計を強化するため需要と供給の問題との間の不均衡に対処するため。

詳細情報:70-299 MB6-509 646-588 BI0-122 640-863 642-565 1Y0-264 646-976 70-236 70-528 HP0-841 920-221 tt0-201 350-018 70-620 70-272

Share This

No related posts.

Cisco CCNA/CCENT Exam-Pack 640-822

execvews — Fri, 12 Dec 2008 06:24:04 +0000

Successful networking careers begin with Cisco CCENT certification and the fundamental knowledge it represents. Trainer Jeremy Cioara carefully explains the certification process by walking you through CCENT networking basics and mapping those basics directly to the exam. His organized and captivating presentation prepares new users for junior administrator positions and provides managers of any description with a sound understanding of what their technicians are talking about.

You proceed at your own pace, watching videos that break down the CCENT certification process and basic Cisco networking into bite-sized nuggets. Video by video you learn how to install, operate and troubleshoot a small enterprise branch network — including basic network security.

Cisco CCNA/CCENT - Exam-Pack 640-822: ICND1 shows you how to be a subnetting master, teaches you about switches and routers, helps you understand essential protocols like TCP and UDP, explains cabling and networking, and covers exciting topics like wireless networking and Cisco’s SDM graphic interface.

These videos go beyond simply prepping you for the CCENT test (although they’re great test prep!). They also teach you skills you’ll need day-in and day-out as a networking technician professional. Over and over again you’ll draw on these videos as an indispensable reference tool. They also lay a terrific foundation for the follow-up CCNA exam and certification.

More information:MB7-514 642-533
70-643 642-611 642-415 156-315.1 pk0-002 70-646 642-503

Share This

Cisco CCNA, CCNP, and CCENT Practice Questions - RIP, VLANs, HSRP, and More! Let's test your knowledge of RIP, Easy VPN Server, VLANs,...
Testking Cisco CCNA 640-822 Product Description Exam Number/Code: 640-822 Exam Name: Interconnecting Cisco Networking...
Cisco CCNA (640-802) FAQ The prestigious Cisco CCNA certification is going to become even...

Pass4sure 70-297 Certification practice training

testking demo — Fri, 05 Dec 2008 08:02:18 +0000

For an organization to stay in business and maximize profits, its management must consider certain business drivers for each business activity the organization undertakes. Common business drivers that the security design must address include the following:70-294 mb2-631 70-640 70-297 70-630

The initial and ongoing cost of security The real and perceived cost of security will always be a driving factor in the implementation of security.
Legal requirements for security Legal requirements affect implementation of security and other IT operational aspects, and the impact of these legal requirements is increasing. Deciding how much security is necessary and convincing management to accept the recommendation is not an easy chore. However, current and proposed laws support the design and development of sound security practices. Consequently, legal requirements often can be an ally to security designers rather than a burden.

The impact security decisions will have on end users For purposes of considering the effect of security on end users, end user is defined as an individual who uses a system to obtain, manage, or distribute information but is not limited to employees who work directly for the company. Customers who access their banking or other information via the Internet, partners who cross gateways to access shared information, and public use of company Web sites are all examples of end users relying on information systems. Security designers must consider the impact that security policies will have on end users. For example, changing the password policy to require the use of symbols, letters, and numbers in password, when users were not required to do so before, can greatly upset a large number of users. If users are not warned that such a change is coming and told what they need to do to, the uproar and complaints can affect productivity and even force a roll-back to a less secure password policy.

How security will mitigate risk Risk is often defined as the probability of suffering a loss. Risk management involves identifying risk and deciding what to do about it. Even if a risk cannot be eliminated, it can be addressed. Mitigation of risk is one the goals of information security.

In addition to these common business drivers, the IT department has business drivers of its own to consider:

Maintaining interoperability The best security design might not be implemented because it failed to take into account the nature of all operating systems and applications that are part of the organization’s network.

Achieving security maintainability goals Any operations design must achieve certain maintainability goals, and this is even more important with security designs. Security devices and procedures that are not maintained will eventually become ineffective.

Addressing scalability needs Many security designs can be implemented in a test network or small business with great success, but are impractical or fail when rolled out across more extensive systems. While you can’t always forecast system growth, you can evaluate a security design in light of the environment it will be deployed in and simply assume moderate growth over time.

The guidelines that follow will help you analyze these business and IT-specific drivers.

Share This

Testking demo 70-297 practice Product Description Exam Number/Code: 70-297 Exam Name: MCSE Designing a...
Pass4sure Cisco 642-642 testing ■ When designing a system that sy0-101 enables your company...
Pass4sure Lastly Microsoft certification exams QUESTION 11 You are a network administrator of Pass4sure ,...

10 Q&As Of CCNA Certification Exam

execvews — Wed, 03 Dec 2008 06:44:30 +0000

The following are part of CCNA exam Q&A from www.certay.com. You can go to certay and consult live-support for more information if you are interested in its products. Now let’s look at the following study-guides offered by certay.

1. What are two reasons that a network administrator would use access lists? (Choose two.)

A: to control vty access into a router
B: to control broadcast traffic through a router
C: to filter traffic as it passes through a router
D: to filter traffic that originates from the router mb2-631
E: to replace passwords as a line of defense against security incursions

Correct Answers: A, C

2. A default Frame Relay WAN is classified as what type of physical network?

A: point-to-point
B: broadcast multi-access
C: nonbroadcast multi-access
D: nonbroadcast multipoint
E: broadcast point-to-multipoint
Correct Answers: C

3. A single 802.11g access point has been configured and installed in the center of a square office. A few wireless users are experiencing slow performance and drops while most users are operating at peak efficiency. What are three likely causes of this problem? (Choose three.) 70-272

A: mismatched TKIP encryption
B: null SSID
C: cordless phones
D: mismatched SSID
E: metal file cabinets
F: antenna type or direction
Correct Answers: C, E, F

4. The command frame-relay map ip 10.121.16.8 102 broadcast was entered on the router. Which of the following statements is true concerning this command?

A: This command should be executed from the global configuration mode. 9L0-402
B: The IP address 10.121.16.8 is the local router port used to forward data.
C: 102 is the remote DLCI that will receive the information.
D: This command is required for all Frame Relay configurations. 642-873
E: The broadcast option allows packets, such as RIP updates, to be forwarded across the PVC.

Correct Answers: E

5. Which type of attack is characterized by a flood of packets that are requesting a TCP connection to a server?

A: denial of service
B: brute force
C: reconnaissance
D: Trojan horse

Correct Answers: A

6. Which of the following are associated with the application layer of the OSI model? (Choose two.)

A: ping
B: Telnet 642-533
C: FTP
D: TCP
E: IP

Correct Answers: B, C

7. For security reasons, the network administrator needs to prevent pings into the corporate networks from hosts outside the internetwork. Which protocol should be blocked with access control lists?

A: IP
B: ICMP
C: TCP
D: UDP 70-630

Correct Answers: B

8. What are two recommended ways of protecting network device configuration files from outside network security threats? (Choose two.)

A: Allow unrestricted access to the console or VTY ports.
B: Use a firewall to restrict access from the outside to the network devices.
C: Always use Telnet to access the device command line because its data is automatically encrypted.
D: Use SSH or another encrypted and authenticated transport to access device configurations.
E: Prevent the loss of passwords by disabling password encryption. 70-297

Correct Answers: B, D

9. Which spread spectrum technology does the 802.11b standard define for operation?

A: IR
B: DSSS
C: FHSS
D: DSSS and FHSS
E: IR, FHSS, and DSSS

Correct Answers: B

14. What are two security appliances that can be installed in a network? (Choose two.)

A: ATM
B: IDS
C: IOS
D: IOX
E: IPS
F: SDM
Correct Answers: B, E

More information:650-621 1z0-042 642-503 70-640 640-802 642-901 1Y0-731 MB2-633 920-221

Share This

Which Router Should I Buy For CCNA? So you want to get your CCNA and you need...
Cisco CCNA, CCNP, and CCENT Practice Questions - RIP, VLANs, HSRP, and More! Let's test your knowledge of RIP, Easy VPN Server, VLANs,...
How To Clear CCNA Certification In First Attemp #01 Tarun Vyas Now CCNA has incresed certification amount so...

Todd Lammel CCNA Study Guide

execvews — Thu, 27 Nov 2008 07:23:02 +0000

Robert J Stowell’s Question:

Hello, does anyone have experience with Todd Lammel’s CCNA study guide? I have heard it is good. Also does anyone have any recommendations as a self study routine using Todd’s book to take the exam with about a month of studying? Thanks! 70-646

List of helpful answers:

#01 Ryan

I’m currently studying under Lammle’s 640-802 CCNA study guide 6th Edition book. I’ve also taken cisco netacad and read one of those books. Lammle’s is deff better in comparison between the two of those. For selfstudy I would reccomend it as he does tend to be less flat (makes for easier reading). 646-363

I have not however taken the CCNA exam yet, (taking the one exam). So I do not know how it compares to the actual test.

As far as studying or self-studying.. I currently combine Lammle’s book + Cbt Nuggets Video for review + dynamips for an emulated hands on approach. I did recieve classroom training for the catalyst switches. There are simulators out there that can emulate the CLI interface for you though such as Boson.642-453

#02 Andrew

otherwise affiliated with, any content provided by unauthorized third-party training companies. We recommend that certification candidates train with Cisco Learning Partners for authorized course offerings that align with current Cisco exam topics. A current list of Cisco Learning Partners can be accessed at here.

Cisco Press products are the only authorized self-study
publications that align with Cisco learning paths. To see the catalog of publications and other resources visit http://www.ciscopress.com.

For more information on Authorized Cisco training and self-study material, please visit here.

More information:70-236 642-415 642-456 350-018 642-373 640-816 70-642 70-271 70-445 642-691 ex0-101

Share This

Study Material for CCNA Security Anweesy3’s Question: I am a current CCNA pursuing the CCNP....
Which Router Should I Buy For CCNA? So you want to get your CCNA and you need...
Chris Corino’s 3 Questions About CCNA I figured this was going to be a short post,...

How To Clear CCNA Certification In First Attemp

execvews — Thu, 27 Nov 2008 07:18:46 +0000

#01 Tarun Vyas

Now CCNA has incresed certification amount so I can not afford second attemp.

I have made compleate prepration for ccna exam and study all but still unable to solve the question.

Please any one can help me how can I clear the CCNA certification in first attemp.70-624

#02 Travis Newshott

Study hard, lab it out, learn the technologies, understand the concepts. Once you are confident in your comprehension, relax and go knock it out. Don’t worry about failing, failure should be the last thing to cross your mind. Remember, you’re just answering some questions on stuff you should know. If you’ve studied hard, you’re just a few dozen mouseclicks away from certification.

I know this sounds generic and vague, but in my opinion, that is how it should be. You’re getting tested from the same pool of questions everyone else is, and the onus is on you to show up and pass. There is no guarantee for anyone…..156-215.1

#03 bytesnagger@CLN

Excellent response. Here’s some more information from the website. Note the date restrictions.

Here’s how to redeem your Cisco “Second Chance” Exam:

Register for an exam at full price. If you fail the exam, you may schedule a free retake of the same exam by entering the promotion code: SECONDCHANCE at the time of registration.650-251

IMPORTANT NOTE:
Both the full-price exam and free Second Chance retake must be scheduled and taken between April 15, 2008 and October 15, 2008, to qualify for this special promotion. Free exams may only be scheduled via the web.

More information:000-331 642-811 642-445 9L0-509 642-061 642-105 642-444 70-631 MB7-515

Share This

Chris Corino’s 3 Questions About CCNA I figured this was going to be a short post,...
Cisco Retired Certification Exams All cisco candidates 646-229, 642-414, 646-203 will be retired in...
Study Material for CCNA Security Anweesy3’s Question: I am a current CCNA pursuing the CCNP....

Pass4sure 70-541 exam answer question

testking demo — Thu, 20 Nov 2008 09:48:23 +0000

Public Key Infrastructure 156-215.1 MB7-515 642-811 70-526
Public key encryption wouldn’t be any easier than shared key encryption if everyone had to manually exchange public keys. That’s why we use a PKI-to make the process of managing and exchanging public keys simpler. A PKI is a set of policies, standards, and software that manages certificates and public and private keys. A PKI consists of a set of digital certificates, certification authorities (CAs), and tools that can be used to authenticate users and computers and to verify transactions. In order to place the PKI implementation provided by Windows Server 2003 in the proper context, this section provides a general overview of the components that make up a PKI.

See Also The data formats and network communications used by a PKI are (mostly) standardized. For detailed, but dry, information about PKI standards, refer to RFC 2459.
Certificates
A public key certificate, referred to in this chapter as simply a certificate, is a tool for using public key encryption for authentication and encryption. Certificates are issued and signed by a CA, and any user or application that examines the certificate can safely assume that the CA did indeed issue the certificate. If you trust the CA to do a good job of authenticating users before handing out certificates, and you believe that the CA protects the privacy of its certificates and keys, you can trust that a certificate holder is who he or she claims to be.

Certificates can be issued for a variety of functions, including Web user authentication, Web server authentication, secure e-mail, encryption of network communications, and code signing. CAs even use certificates to identify themselves, create other certificates, and establish a certification hierarchy between other CAs. If the Windows Server 2003 enterprise CA is used in an organization, clients can use certificates to log on to the domain.

Certification authorities
A CA is an entity trusted to issue certificates to an individual, a computer, or a service. A CA accepts a certificate request, verifies the requester’s information according to the policies of the CA and the type of certificate being requested, generates a certificate, and then uses its private key to digitally sign the certificate. A CA can be a public third party, such as VeriSign, or it can be internal to an organization. For example, you might choose to use Windows Server 2003 Certificate Services to generate certificates for users and computers in your Active Directory directory service domain. Each CA can have distinct proof-of-identity requirements for certificate requesters, such as a domain account, an employee badge, a driver’s license, a notarized request, or a physical address.

Registration is the process by which subjects make themselves known to a CA. Registration can be accomplished automatically during the certificate enrollment process, or it can be accomplished by a trusted entity such as a smart card enrollment station. Certificate enrollment is the procedure that a user follows to request a certificate from a CA. The certificate request provides identity information to the CA, and the information the user provides becomes part of the issued certificate.

Certificate life cycle MB7-517 70-299 70-541
Certificates cannot be used forever; that would give an attacker too much time to identify the corresponding private key. Certificates have a predefined life cycle and expire at the end of this life cycle. You, as the security administrator, maintain control over the certificate. You can extend the lifetime of a certificate by renewing it, or end the usefulness of a certificate before the expiration date by revoking it.

A number of factors influence the length you will choose for a certificate lifetime, such as the type of certificate, the security requirements of your organization, the standard practices in your industry, and government regulations. In general, longer keys support longer certificate lifetimes and key lifetimes. Longer lifetimes reduce administrative labor, which reduces costs.

Share This

Pass4sure jn0-562 certification exam information The following steps demonstrate the flow of events that occur...
Pass4sure Cisco 640-822 practice testing The ToolStrip control is a host for ToolStripMenuItem controls that...
Pass4sure New IT Certification Exams [0g0-081] - TOGAF 8 Certification for Practitioners [QQ0-401] - SDI-Service...

Pass4sure Microsoft 70-237 exam guides

testking demo — Wed, 19 Nov 2008 09:19:56 +0000

Considerations for Evaluating Your Environment 70-431 70-646 70-236
When establishing an authentication strategy for your organization, you must become familiar with your current environment, including the structure of your organization; the users, computers, and services in your organization that require authentication; and the applications and services that are in use. This will help you to understand the requirements and constraints of your organization.
When evaluating your environment, identify the following:
The number of domain controllers in your organization. Ensure that there are enough domain controllers to support client logon requests and authentication requests while meeting your redundancy requirements. A sufficient number of domain controllers will ensure that a large volume of authentication requests will not result in authentication failures, even if a domain controller is offline because of hardware or network failures.
The type of network connectivity between site locations in your organization. Ensure that clients in remote sites are connected well enough to authenticate to domain controllers located in main sites. If connectivity is an issue, consider installing domain controllers in sites that might have logon problems because of slow or unreliable links. 642-415 642-373 70-642
Planning Everyone is always concerned about whether they have enough bandwidth, but it’s latency that’s more likely to cause authentication problems across wide area network links. Authentication requires very little bandwidth. However, packets must go back and forth across the link several times. If latency causes a significant delay for each round trip, authentication will seem slow.
The number of certification authorities (CAs) that are available in your organization and their locations. Ensure that you have enough CAs to support the anticipated number of certificate requests.
Guidelines for Creating a Strong Password Policy
Encryption limits your vulnerability to having user credentials intercepted and misused. Specifically, password encryption is designed to be extremely difficult for unauthorized users to decrypt. Ideally, when a strong password is used, it should take an attacker months, years, or decades to identify the unencrypted password after the attacker captures the encrypted or hashed password. During that time, the password should have been changed—making the unencrypted password now useless.
In contrast, weak passwords can be identified in a matter of hours or days, even when they have been encrypted. Encryption cannot protect against passwords that are easily guessed, because weak passwords are vulnerable to dictionary attacks. Dictionary attacks encrypt a list of common passwords, and compare each possibility with the captured cyphertext. If the password appears in the password dictionary, the attacker will identify the password quickly. You can defend against this vulnerability by implementing a strong password policy.
Off the Record The best way to understand how effective dictionary attacks are is to grab a password cracking tool from the Internet and experiment with it on a test machine. I can’t point you to a specific tool, but they’re not hard to find. 70-271 70-445 70-237

Share This

Pass4sure 70-541 exam answer question Public Key Infrastructure 156-215.1 MB7-515 642-811 70-526 Public key encryption...
Pass4sure Microsoft 70-649 exam guides Performing Bulk Copy Operations 640-801 HP0-145 70-646 This lesson describes...
Pass4sure jn0-562 certification exam information The following steps demonstrate the flow of events that occur...

Pass4sure jn0-562 certification exam information

testking demo — Wed, 19 Nov 2008 08:57:53 +0000

The following steps demonstrate the flow of events that occur when a client authenticates to a domain controller using any of the NTLM protocols: 70-649 1D0-470 117-202 jn0-562
The client and server negotiate an authentication protocol. This is accomplished through the Microsoft negotiate Security Support Provider (SSP).
The client sends the user name and domain name to the domain controller.
The domain controller generates a 16-byte random character string called a nonce.
The client encrypts the nonce with a hash of the user password and sends it back to the domain controller.
The domain controller retrieves the hash of the user password from the security account database.
The domain controller uses the hash value retrieved from the security account database to encrypt the nonce. The value is compared with the value received from the client. If the values match, the client is authenticated.
The Kerberos Authentication Process
The Kerberos protocol gets it name from the three-headed dog in Greek mythology. The three components of Kerberos are:
The client requesting services or authentication.
The server hosting the services requested by the client.
A computer that is trusted by the client and server (in this case, a Windows Server 2003 domain controller running the Kerberos Key Distribution Center service).
Kerberos authentication is based on specially formatted data packets known as tickets. In Kerberos, these tickets pass through the network instead of passwords. Transmitting tickets instead of passwords makes the authentication process more resistant to attackers who can intercept the network traffic.
Key Distribution Center 1D0-510 MB6-508 190-802 70-290
The Key Distribution Center (KDC) maintains a database of account information for all security principals in the domain. The KDC stores a cryptographic key known only to the security principal and the KDC. This key is used in exchanges between the security principal and the KDC and is known as a long term key. The long term key is derived from a user’s logon password.
Kerberos authentication process
In a Kerberos environment, the authentication process begins at logon. The following steps describe the Kerberos authentication process:
When a user enters a user name and password, the computer sends the user name to the KDC. The KDC contains a master database of unique long term keys for every principal in its realm.
The KDC looks up the user’s master key (KA), which is based on the user’s password. The KDC then creates two items: a session key (SA) to share with the user and a Ticket-Granting Ticket (TGT). The TGT includes a second copy of the SA, the user name, and an expiration time. The KDC encrypts this ticket by using its own master key (KKDC), which only the KDC knows.
Note Kerberos implements secret key cryptography, which is different from public key cryptography in that it does not use a public and private key pair.
The client computer receives the information from the KDC and runs the user’s password through a one-way hashing function, which converts the password into the user’s KA. The client computer now has a session key and a TGT so that it can securely communicate with the KDC. The client is now authenticated to the domain and is ready to access other resources in the domain by using the Kerberos protocol.
Important When a client receives the session key and TGT from the server, it stores that information in volatile memory and not on the hard disk. Storing the information in the volatile memory and not on the hard disk makes the information more secure, because the information would be lost if the server were physically removed.
When a Kerberos client needs to access resources on a server that is a member of the same domain, it contacts the KDC. The client will present its TGT and a timestamp encrypted with the session key that is already shared with the KDC. The KDC decrypts the TGT using its KKDC. The TGT contains the user name and a copy of the SA. The KDC uses the SA to decrypt the timestamp. The KDC can confirm that this request actually comes from the user because only the user can use the SA.
Next, the KDC creates a pair of tickets, one for the client and one for the server on which the client needs to access resources. Each ticket contains the name of the user requesting the service, the recipient of the request, a timestamp that declares when the ticket was created, and a time duration that says how long the tickets are valid. Both tickets also contain a new key (KAB) that will be shared between the client and the server so they can securely communicate.
The KDC takes the server’s ticket and encrypts it using the server master key (KB). Then the KDC nests the server’s ticket inside the client’s ticket, which also contains the KAB. The KDC encrypts the whole thing using the session key that it shares with the user from the logon process. The KDC then sends all the information to the user.
When the user receives the ticket, the user decrypts it using the SA. This exposes the KAB to the client and also exposes the server’s ticket. The user cannot read the server’s ticket. The user will encrypt the timestamp by using the KAB and send the timestamp and the server’s ticket to the server on which the client wants to access resources. When it receives these two items, the server first decrypts its own ticket by using its KB. This permits access to the KAB, which can then decrypt the timestamp from the client. HP0-145 70-646 70-291
Now both the client and the server have the KAB. The server can be sure that the client has truthfully identified itself because the client used the KAB to encrypt the timestamp. If it is necessary for the server to respond to the user, the server will use the KAB. The client will know that the server has truthfully identified itself because the server had to use its KB to get the KAB.
Exam Tip Be sure you understand the Kerberos authentication process for the exam!

Share This

Pass4sure Microsoft 70-237 exam guides Considerations for Evaluating Your Environment 70-431 70-646 70-236 When establishing...
Pass4sure 70-541 exam answer question Public Key Infrastructure 156-215.1 MB7-515 642-811 70-526 Public key encryption...
Pass4sure Lastly Microsoft certification exams QUESTION 11 You are a network administrator of Pass4sure ,...