nerdexam
Linux_Foundation

LFCS · Question #345

Which statements are true of object classes in an LDAP directory? (Choose TWO correct answers)

The correct answer is C. An entry cannot have more than one structural object class. D. Once an entry has been created, its structural object class cannot be changed without re creating. An LDAP entry can only possess a single structural object class, which cannot be modified once the entry is created, necessitating recreation for changes.

Submitted by helene.fr· Apr 18, 2026Service Configuration

Question

Which statements are true of object classes in an LDAP directory? (Choose TWO correct answers)

Options

  • AAuxiliary object classes - when used on their own - provide access to extended schema.
  • BAn entry cannot have more than one auxiliary object class.
  • CAn entry cannot have more than one structural object class.
  • DOnce an entry has been created, its structural object class cannot be changed without re creating
  • EAbstract object classes are no longer officially support by the LDAP protocol.

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    90% (35)
  • E
    5% (2)

Why each option

An LDAP entry can only possess a single structural object class, which cannot be modified once the entry is created, necessitating recreation for changes.

AAuxiliary object classes - when used on their own - provide access to extended schema.

Auxiliary object classes add optional attributes to an entry but cannot independently provide access to extended schema; they always complement a structural object class.

BAn entry cannot have more than one auxiliary object class.

An LDAP entry can indeed have multiple auxiliary object classes, allowing it to inherit various sets of optional attributes and schema rules.

CAn entry cannot have more than one structural object class.Correct

An LDAP entry is restricted to having only one structural object class, which fundamentally defines its type within the directory schema (e.g., 'person' or 'organizationalUnit'), ensuring a consistent primary definition.

DOnce an entry has been created, its structural object class cannot be changed without re creatingCorrect

Once an LDAP entry is created, its structural object class cannot be directly altered; to change the fundamental type of an entry, it typically must be deleted and then recreated with the desired structural object class.

EAbstract object classes are no longer officially support by the LDAP protocol.

Abstract object classes remain fundamental in LDAP, serving as templates for other classes and cannot be directly instantiated as entries themselves.

Concept tested: LDAP object class rules and types

Source: https://www.rfc-editor.org/rfc/rfc4512

Topics

#LDAP#Object Classes#Schema Management#Directory Entries

Community Discussion

No community discussion yet for this question.

Full LFCS Practice