SSCP Access Controls Practice Question
An organization uses Kerberos for single sign-on. When a user logs in, they receive a Ticket Granting Ticket (TGT). What is the primary purpose of the TGT?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To obtain service tickets for accessing resources
The TGT is obtained from the Authentication Server (AS) and is used to request service tickets from the Ticket Granting Server (TGS) without re-entering credentials, enabling SSO.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To encrypt all network traffic
Why it's wrong here
The TGT is not used for encrypting traffic.
- ✓
To obtain service tickets for accessing resources
Why this is correct
The TGT is presented to the TGS to get service tickets for specific services.
- ✗
To provide a digital signature for emails
Why it's wrong here
The TGT is not used for email signatures.
- ✗
To authenticate the user to the network
Why it's wrong here
The TGT is not used directly for network authentication; it is used to obtain service tickets.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. In a Kerberos environment, what is the primary function of the Ticket Granting Ticket (TGT)?
medium- A.To store the user's password hash securely
- ✓ B.To request service tickets from the Ticket Granting Service (TGS)
- C.To provide a session key for encrypting communications
- D.To authenticate the user to the Key Distribution Center (KDC)
Why B: The TGT is obtained after initial authentication and is used to request service tickets for various resources without re-authenticating.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.