Exam 23: Internet Authentication Applications

Initialization begins the process of enrolling in a PKI.

In Kerberos,the ___________ decrypts the ticket and authenticator,verifies the request,and creates ticket for requested server.

________ requires that a user prove his or her identity for each service invoked and,optionally,requires servers to prove their identity to clients.

In a generic identity management architecture a ________ is an identity holder.

The approach taken by Kerberos is using authentication software tied to a secure authentication server.

________ is a process where authentication and permission will be passed on from one system to another,usually across multiple enterprises,reducing the number of authentications needed by the user.

The ticket-granting ticket is encrypted with a secret key known only to the AS and the TGS.

_______ is the process in which a CA issues a certificate for a user's public key and returns that certificate to the user's client system and/or posts that certificate in a repository.

A full-service Kerberos environment consisting of a Kerberos server that has the user ID and password of all participating users in its database and shares a secret key with each server,all users and servers being registered with the Kerberos server,is referred to as a Kerberos ______.

Federated identity management makes use of a number of standards that provide the building blocks for secure identity information exchange across different domains or heterogeneous systems.

Update is not required when the certificate lifetime expires or as a result of certificate revocation.

________ is a set of SOAP extensions for implementing message integrity and confidentiality in Web services.

Kerberos is designed to counter only one specific threat to the security of a client/server dialogue.

Because serial numbers are unique within a CA,the serial number is sufficient to identify the certificate.

One of the earliest and most widely used services is _________.

An alternative to each server being required to confirm identities of clients who request service is to use an _______ that knows the passwords of all users and stores them in a centralized database.

Kerberos uses the _______ encryption algorithm.

X.509 provides a format for use in revoking a key before it expires.

The _______ consists of two dates: the first and last on which the certificate is valid.

_______ is movement of data in a business process.