XK0-004 · Question #358
A Linux server hosts Kerberos and LDAP, which of the following is the MOST likely role of this server?
The correct answer is D. Authentication. A server running both Kerberos and LDAP is acting as a centralized authentication server. Kerberos handles ticket-based authentication while LDAP provides the directory of user credentials.
Question
A Linux server hosts Kerberos and LDAP, which of the following is the MOST likely role of this server?
Options
- ACertificate authority
- BClustering
- CDatabase
- DAuthentication
How the community answered
(30 responses)- A3% (1)
- C3% (1)
- D93% (28)
Why each option
A server running both Kerberos and LDAP is acting as a centralized authentication server. Kerberos handles ticket-based authentication while LDAP provides the directory of user credentials.
A Certificate Authority issues and manages X.509 digital certificates, a function handled by software like OpenSSL CA or Dogtag, not Kerberos or LDAP.
Clustering groups multiple servers for high availability or load balancing and is unrelated to authentication protocols like Kerberos or LDAP.
A database server manages structured data storage using engines like PostgreSQL or MySQL, not authentication ticket exchange or directory queries.
Kerberos is a network authentication protocol that uses encrypted tickets to verify user and service identities, and LDAP (Lightweight Directory Access Protocol) stores and retrieves user account data for authentication and authorization decisions. Together they form the standard stack for centralized authentication on Linux, commonly seen in enterprise environments integrating with Active Directory or FreeIPA. Neither service is involved in certificate issuance, clustering, or general data storage.
Concept tested: Kerberos and LDAP centralized authentication server roles
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/index
Topics
Community Discussion
No community discussion yet for this question.