Refer to the exhibit. During Directory Sync and Authentication configuration, which two options are selectable for the Administrator in the User Name pull down menu? (Choose two.)

Question

Exhibit

Options

• AdistinguishedName
• BsAMAccountName
• CUserPrincipalName
• DUserName
• ESID

• A
  2% (1)
• B
  94% (48)
• D
  4% (2)

Explanation

When configuring Directory Sync and Authentication (typically in a product like Palo Alto Networks), the Administrator's User Name field accepts formats that are standard, human-readable Active Directory login identifiers. sAMAccountName (B) is the classic pre-Windows 2000 login name (e.g., jsmith), and UserPrincipalName (C) is the UPN email-style login (e.g., [email protected]) - both are practical, widely-used formats for authenticating a service/admin account against Active Directory.

distinguishedName (A) is wrong because it's a full LDAP path (e.g., CN=jsmith,OU=Admins,DC=corp,DC=com) used to locate objects in the directory tree, not to authenticate with them. UserName (D) is not a real Active Directory attribute - it's a generic term, not a valid AD field. SID (E) is a binary Security Identifier used internally by Windows for access control, not a human-usable login credential.

Memory tip: Think of it as "how would a person actually type their username to log in?" - SAM (jsmith) and UPN ([email protected]) are both things a human types; DNs, SIDs, and made-up fields are not.

No community discussion yet for this question.