Skip to content
AI Security

kerberos

AI security interview questions tagged kerberos, across every topic.

2 questions · 0 unlocked for you
Open full answer →
Open full answer →

Concepts behind "kerberos"

Explanations of the mechanisms these questions rely on.

Core
Systems & OS SecuritySign in
Windows and Active Directory Security for InterviewsWindows decides access by comparing a process's access token (user and group SIDs, privileges, integrity level) with an object's security descriptor. Privileges such as SeImpersonate and SeDebug bypass object permissions and are often the real escalation. Active Directory authenticates with Kerberos: tickets protected by the krbtgt key and by service account keys, which is why weak service passwords can be cracked offline and a stolen krbtgt key forges anything. Most domain compromises use credentials cached where admins logged on, so tiering, LAPS, Credential Guard and gMSAs are the core defences.
Explore the full curriculum →