CompTIA CASP+ Practice Test

Which authentication type uses tickets for user authentication?

1. OAuth

2. Kerberos

3. RADIUS

4. SAML

The correct answer is: Kerberos

The authentication type that utilizes tickets for user authentication is Kerberos. The Kerberos protocol operates on a ticket-based system, which allows users to prove their identity across a network securely. When a user logs in, Kerberos issues a "ticket-granting ticket" (TGT) that serves as proof of identity. This TGT can then be used to request access to specific services without needing to re-enter credentials, thus facilitating single sign-on capabilities. In this system, the ticket is time-stamped and includes a validity period, which enhances security by limiting the time frame in which a ticket can be used. This method not only improves user convenience but also minimizes the risk of password exposure since passwords are not continuously sent over the network. In contrast, the other authentication types have different mechanisms: OAuth is primarily used for authorization rather than authentication by issuing access tokens, RADIUS (Remote Authentication Dial-In User Service) utilizes a client-server model to authenticate users based on username and password credentials, and SAML (Security Assertion Markup Language) is based on exchanging XML-based security assertions between an identity provider and a service provider, rather than using tickets. Each choice has its purpose and application, but it is Kerberos specifically that employs a ticketing system