nerdexam
CompTIA

CAS-003 · Question #31

A company wants to extend its help desk availability beyond business hours. The Chief Information Officer (CIO) decides to augment the help desk with a third-party service that will answer calls and…

The correct answer is A. LDAP. The third-party help desk needs to perform Tier 1 functions including password resets. Password resets require direct interaction with the enterprise directory service. LDAP (Lightweight Directory Access Protocol) is the standard protocol used to query and modify directory…

Technical Integration of Enterprise Security

Question

A company wants to extend its help desk availability beyond business hours. The Chief Information Officer (CIO) decides to augment the help desk with a third-party service that will answer calls and provide Tier 1 problem resolution, such as password resets and remote assistance. The security administrator implements the following firewall change:

The administrator provides the appropriate path and credentials to the third-party company. Which of the following technologies is MOST likely being used to provide access to the third company?

Exhibit

CAS-003 question #31 exhibit

Options

  • ALDAP
  • BWAYF
  • COpenID
  • DRADIUS
  • ESAML

How the community answered

(21 responses)
  • A
    95% (20)
  • E
    5% (1)

Explanation

The third-party help desk needs to perform Tier 1 functions including password resets. Password resets require direct interaction with the enterprise directory service. LDAP (Lightweight Directory Access Protocol) is the standard protocol used to query and modify directory objects, including user accounts and credentials. The firewall change described would open the LDAP port (389) or LDAPS port (636) to allow the third-party provider to connect to the internal directory. RADIUS is used for network access authentication (VPNs, wireless) and does not support directory management operations like password resets. SAML and OpenID are federation protocols for single sign-on - they authenticate users but do not provide directory management. WAYF ('Where Are You From') is a federation discovery protocol used in academic identity federations, not applicable here.

Topics

#LDAP#directory services#third-party access#remote assistance

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice