050-696 · Question #140
What information is contained within the Object Trustees (ACL) property of an eDirectory object?
The correct answer is D. The names of all trustees of the object and the rights granted to these trustees. The Object Trustees (ACL) property of an eDirectory object is that object's access control list - it records every trustee assigned to the object and the specific rights each trustee has been granted.
Question
Options
- AThe globally unique ID (GUID) of the object.
- BA list of rights the object has to other eDirectory objects.
- CA list of other eDirectory objects that the object has rights to.
- DThe names of all trustees of the object and the rights granted to these trustees.
How the community answered
(46 responses)- A4% (2)
- B17% (8)
- C7% (3)
- D72% (33)
Why each option
The Object Trustees (ACL) property of an eDirectory object is that object's access control list - it records every trustee assigned to the object and the specific rights each trustee has been granted.
The GUID is a separate, system-maintained attribute on the object used for internal identification, not stored within the ACL property.
The ACL property records who has rights to this object; rights that this object holds over other objects are stored in those other objects' respective ACL properties.
A list of objects that this object has rights to is not stored locally in its ACL - that information is distributed across the ACL properties of each target object.
The ACL property is stored directly on each eDirectory object and contains a list of Trustee Distinguished Names paired with their granted object rights and property rights. When a rights check is performed, eDirectory reads this property to determine who has access and at what level. This is the core mechanism by which eDirectory enforces access control for directory objects.
Concept tested: eDirectory Object Trustees ACL property structure
Source: https://www.netiq.com/documentation/edirectory-92/edir_admin/data/b1j5fgvz.html
Topics
Community Discussion
No community discussion yet for this question.