Windows Active Directory is based on Kerberos and LDAP. When authenticating via the Domain Controller, how does my endpoint know that it's really speaking to the DC?
Likewise, AD can be used to authenticate for services hosted on other machines (e.g. SQL Server). How does the SQL Server know that the DC is the real DC?