352-011 · Question #74
ACME Agricultural requires that access to all network devices is granted based on identify validation, and an authentication server was installed for this purpose. Currently the network team uses a…
The correct answer is D. LDAP. LDAP (Lightweight Directory Access Protocol) is correct because it is specifically designed to query and authenticate against directory services - like Microsoft Active Directory - which is exactly what an authentication server needs to validate user identities stored in a…
Question
ACME Agricultural requires that access to all network devices is granted based on identify validation, and an authentication server was installed for this purpose. Currently the network team uses a list of passwords based on regions to access the internal corporate network devices. Which protocol do you recommend to ensure identify validation from the authentication server to the corporate directory?
Options
- AHTTPS
- BTACACS+
- CSSH
- DLDAP
How the community answered
(37 responses)- A3% (1)
- B8% (3)
- C14% (5)
- D76% (28)
Explanation
LDAP (Lightweight Directory Access Protocol) is correct because it is specifically designed to query and authenticate against directory services - like Microsoft Active Directory - which is exactly what an authentication server needs to validate user identities stored in a corporate directory. The key phrase in the question is "authentication server to the corporate directory," which points directly to LDAP's purpose as a directory access protocol.
TACACS+ (B) is a strong distractor, but it handles AAA (Authentication, Authorization, Accounting) between network devices and the authentication server - not between the auth server and the corporate directory. HTTPS (A) is a web transport protocol for encrypting HTTP traffic and has no role in directory lookups. SSH (C) provides secure remote shell access to devices but is not a directory query protocol.
Memory tip: LDAP literally stands for Lightweight Directory Access Protocol - if the question mentions a corporate directory or Active Directory, "directory" in the answer is LDAP.
Topics
Community Discussion
No community discussion yet for this question.