nerdexam
Cisco

300-820 · Question #164

An administrator deployed the directory connector to synchronize the on-premises Active Directory with the Webex cloud and needs to map attributes from the AD to the corresponding attributes in the…

The correct answer is B. ds-pwp-account-disabled. The Active Directory attribute 'userAccountControl' is a bitmask that indicates the state of an AD user account, including whether it is enabled or disabled. When mapping AD attributes to Webex cloud attributes in Directory Connector, this attribute must be mapped to…

Cisco Webex Core Components

Question

An administrator deployed the directory connector to synchronize the on-premises Active Directory with the Webex cloud and needs to map attributes from the AD to the corresponding attributes in the cloud. To which Webex cloud attribute must the user Account Control attribute be mapped to ensure that users are synced properly?

Options

  • AgivenName
  • Bds-pwp-account-disabled
  • CSipAddresses:type=enterprise
  • DdisplayName

How the community answered

(51 responses)
  • A
    10% (5)
  • B
    82% (42)
  • C
    6% (3)
  • D
    2% (1)

Explanation

The Active Directory attribute 'userAccountControl' is a bitmask that indicates the state of an AD user account, including whether it is enabled or disabled. When mapping AD attributes to Webex cloud attributes in Directory Connector, this attribute must be mapped to 'ds-pwp-account-disabled' in the Webex cloud schema. This mapping ensures that disabled AD accounts are correctly reflected as disabled in the Webex cloud, preventing deprovisioned users from retaining cloud access. The other options (givenName, SipAddresses, displayName) serve different purposes and do not represent account state.

Topics

#Webex Directory Connector#Active Directory Synchronization#Attribute Mapping#User Provisioning

Community Discussion

No community discussion yet for this question.

Full 300-820 Practice