Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

A) An attacker manages to intercept a TGT and he comes to the sessionkey of a us

ID: 3919719 • Letter: A

Question

A)
An attacker manages to intercept a TGT and he comes to the sessionkey of a user:
-> Can the attacker now use the Kerberos service on behalf of the user?
-> Can the attacker also request the service on behalf of other users?

B)
Describe briefly how firewalls work!

What is the difference between dynamic and static filters on firewalls?

A company has an internal network. What can you do to make TCP connections from the corporate network to the Internet
are possible, but not vice versa?

C)
There is a public key authentication service.
The service has the public keys of all participants:

Where is the advantage of public key authentication compared to password authentication?

A new participant logs in to the service. How can the service be authenticity
of the new subscriber? The communication is carried out via a secure channel.

What needs to be changed in the previous scenario when communicating over an unsecured channel?

Explanation / Answer

Answer)

A) Yes an attacker can use the kerberos as it contains the replay attack, password attack against ticket granting tickets etc.

Yes . The Kerberos is meant to authenticate the clients to multiple network services.

B) A firewall monitors the data which flows into from among the internet and then verifies if information is safe.

By the use of NAT (Network Address Translation) this ca be done.

Please note: As per Chegg policy, if any question has multiple questions then a minimum of one question can be answered. If you wish to get all the answers please help to re-post the same in separate questions instead of down rating the same.

Hit like/ upvote if you find the answer useful. Your response is important to us and is much needed.

Hope this answer helps. Happy to help. :)

Hire Me For All Your Tutoring Needs
Integrity-first tutoring: clear explanations, guidance, and feedback.
Drop an Email at
drjack9650@gmail.com
Chat Now And Get Quote