Which of the following protocols can be used to secure an LDAP service against anonymous queries?

Question

Options

• ANTLM
• BRADIUS
• CWPA
• DSSO

• A
  93% (39)
• C
  5% (2)
• D
  2% (1)

Explanation

LDAP Security with NTLM

NTLM (NT LAN Manager) is an authentication protocol that can be used to secure LDAP by requiring clients to authenticate before querying the directory, effectively blocking anonymous access. When LDAP is configured to require NTLM authentication, unauthenticated (anonymous) requests are rejected, ensuring only authorized users can retrieve directory information.

Why the distractors are wrong:

• RADIUS is an authentication, authorization, and accounting (AAA) protocol primarily used for network access control (e.g., VPN, Wi-Fi), not for securing LDAP queries directly.
• WPA (Wi-Fi Protected Access) is a wireless network encryption protocol and has no relevance to LDAP security.
• SSO (Single Sign-On) is an authentication concept/framework, not a standalone protocol that can be applied to block anonymous LDAP queries.

Memory Tip: Think of NTLM as a "Name Tag" check at the door - LDAP won't let anyone in without verifying who they are first. If there's no name tag (credentials), access is denied. NTLM = No Trespassing without Logging in to Microsoft directories.

No community discussion yet for this question.