nerdexam
SailPoint

SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER · Question #14

Exhibit. The diagram represents me contents of a single Active Directory forest. Assume that all employees hove employeeType set to employee and contractors have employeeType set to contractor. is…

The correct answer is B. No. The configuration provided is not valid due to an error in the server specification for Domain B. The server for Domain B (domainb.com) is incorrectly set to server.domaina.com, which is not correct. Each domain in the Active Directory (AD) forest should have its own respective…

Source and Connector Management

Question

Exhibit. The diagram represents me contents of a single Active Directory forest. Assume that all employees hove employeeType set to employee and contractors have employeeType set to contractor. is the following configuration valid for the given scenario? Solution: The customer needs to query only Employees from Domain A and Contingent Workers from Domain B Fotests: 1. DN - dc=domains, dc=com;TLS =No; Server = server,domaina.com 2. DN - dc=domaininb,dc=com;TLS =No; Server = server,domaina.com search DNS: 1. DN - OU=users, DC=domains, DC=com; LDAP Filter = (employeeType=employee 2. DN - OU=Contingent Workers, OU=Users, DC=domainb, DC=com

Exhibit

SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER question #14 exhibit

Options

  • AYes
  • BNo

How the community answered

(14 responses)
  • A
    14% (2)
  • B
    86% (12)

Explanation

The configuration provided is not valid due to an error in the server specification for Domain B. The server for Domain B (domainb.com) is incorrectly set to server.domaina.com, which is not correct. Each domain in the Active Directory (AD) forest should have its own respective server. For Domain B, the correct server should be something like server.domainb.com, assuming that there are distinct domain controllers for each domain. Additionally, the search DN for Domain A appears to be valid as it correctly filters for employees with (employeeType=employee). The search DN for Domain B seems to be partially correct, as it targets the OU=Contingent Workers, but the issue lies with the incorrect server assignment. Key Reference from SailPoint Documentation: Active Directory Configuration: Each domain in a forest should be connected to its respective server, and incorrect server assignments between domains can cause LDAP search and synchronization issues. Proper domain controller assignment for both domaina.com and domainb.com is required.

Topics

#Active Directory#LDAP configuration#multi-domain forest#source aggregation

Community Discussion

No community discussion yet for this question.

Full SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER Practice