Which statement about WSA user authentication is true?

Question

Options

• AA single WSA can have up to two authentication realms: one for LDAP and one for NTLM
• BWSA supports LDAP but not NTLM.
• CWSA supports NTLM but not LDAP.
• DA single WSA can have multiple LDAP realms.

• A
  2% (1)
• B
  4% (2)
• C
  2% (1)
• D
  92% (49)

Explanation

Option D is correct because the Cisco Web Security Appliance (WSA) supports configuring multiple LDAP realms simultaneously, allowing organizations to authenticate users against different LDAP directories (e.g., different departments or domains) within a single appliance.

Why the distractors are wrong:

• A is incorrect because WSA is not limited to just two realms (one LDAP, one NTLM); it supports multiple realms of the same type.
• B is incorrect because WSA supports both LDAP and NTLM - NTLM is commonly used for seamless Windows domain authentication.
• C is incorrect for the same reason - WSA supports both protocols, not just NTLM.

Memory tip: Think "D for Directory Duplication" - WSA can connect to multiple LDAP directories, which is essential in large enterprises with complex Active Directory or LDAP infrastructure. If you remember that WSA supports both LDAP and NTLM (eliminating B and C), and that it's not capped at a single realm of each type (eliminating A), D is the only answer left standing.

No community discussion yet for this question.