Which option describes when LDAP domain assignments are used?

Question

Options

• AWhen not all users are in the directory
• BWhen just some users are in the directory
• CWhen users are in separate domains, each of which has their own directory
• DWhen users in the same domain are split over different directories

• A
  5% (1)
• C
  89% (17)
• D
  5% (1)

Explanation

LDAP domain assignments solve a routing problem: when users exist in separate domains, each backed by its own directory server, the system needs to know which directory to query for a given user. Domain assignments create that mapping - domain X queries directory X, domain Y queries directory Y - enabling proper authentication across organizational boundaries like subsidiaries, mergers, or geographic divisions.

Why the distractors fail:

• A & B (not all / just some users in the directory): These describe coverage gaps within a single directory, handled by fallback auth methods or local accounts - not by domain assignments.
• D (same domain split across directories): Splitting one domain across multiple directories is a replication/referral problem. Domain assignments specifically address different domains with different directories, not one domain fragmented internally.

Memory tip: Think of domain assignments like postal ZIP codes - each domain is a ZIP code that tells the mail carrier (the auth system) exactly which post office (directory) to deliver the lookup to. You only need ZIP codes when there are separate jurisdictions, not just when some mailboxes are empty.

No community discussion yet for this question.