When using LDAP servers, you should configure the password policy to prevent _____.

The correct answer is B. dictionary attacks. LDAP password policies are specifically designed to defend against dictionary attacks - automated attempts that systematically try common words, phrases, or known passwords against user accounts. Password policy controls such as lockout thresholds (e.g., locking an account…

Designing Security

Question

Options

ADoS attacks
Bdictionary attacks
Cflood attacks
Dman-in-the-middle attacks

How the community answered

(59 responses)

A
7% (4)
B
88% (52)
C
3% (2)
D
2% (1)

Explanation

LDAP password policies are specifically designed to defend against dictionary attacks - automated attempts that systematically try common words, phrases, or known passwords against user accounts. Password policy controls such as lockout thresholds (e.g., locking an account after N failed attempts), complexity requirements, and minimum length directly counter this attack vector by limiting guessing attempts and ensuring passwords are not easily guessable. DoS and flood attacks (A, C) target availability and are mitigated at the network/infrastructure layer, not via password policy. Man-in-the-middle attacks (D) are addressed through encryption (TLS/LDAPS) and certificate validation, not password policy.

Topics

#LDAP#password policy#dictionary attack#authentication security

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice