The ________ gives the verifier a symmetric session key.

• A. ticket-granting ticket
• B. Both A and B
• C. Neither A nor B
• D. service ticket

Answer: (D)

In Kerberos, tickets carry the keys needed to establish a secure session. The service ticket is issued for a specific service and includes a symmetric session key shared between the client and that service. When the client presents this ticket to the service, the service decrypts it with its own secret key and retrieves the session key, which it then uses to communicate securely with the client. This session key is what the verifier (the service) uses for the ongoing interaction, enabling encryption and mutual authentication for that session. The ticket-granting ticket, by contrast, is only used to obtain service tickets and does not provide the symmetric session key for the service session.