LFCS · Question #196
It's important to issue the Start TLS operation at the beginning of a session:
The correct answer is B. To prevent usernames and passwords from being sent in plain text. It is critical to initiate the Start TLS operation at the beginning of an LDAP session to encrypt the communication channel and protect sensitive data.
Question
Options
- ATo compress any data sent over the network and improve performance.
- BTo prevent usernames and passwords from being sent in plain text.
- CTo ensure backward compatibility with older clients.
- DTo prevent clients from binding to the server anonymously.
How the community answered
(33 responses)- A3% (1)
- B94% (31)
- D3% (1)
Why each option
It is critical to initiate the Start TLS operation at the beginning of an LDAP session to encrypt the communication channel and protect sensitive data.
TLS primarily provides encryption and integrity, not data compression, which is not its main purpose.
The Start TLS operation upgrades an unencrypted LDAP connection to a secure, encrypted one using SSL/TLS. This encryption prevents usernames, passwords, and other authentication credentials from being transmitted in plain text over the network, thereby protecting them from eavesdropping and unauthorized access.
Start TLS enhances security and does not inherently ensure backward compatibility, as older clients may not support it.
Start TLS secures the connection but does not prevent anonymous binds; that requires server-side Access Control List (ACL) configuration.
Concept tested: LDAP Start TLS purpose
Source: https://www.openldap.org/doc/admin24/security.html#TLS
Topics
Community Discussion
No community discussion yet for this question.