CompTIA Server+ (SK0-005)Security and Disaster RecoveryMedium
A server administrator is implementing an identity and access management (IAM) solution for a large organization. The goal is to centralize user authentication and authorization across multiple disparate applications and services, reducing administrative overhead and improving security consistency. Which protocol would be most suitable for achieving this single sign-on (SSO) capability and centralized identity management?
- AFTP
- BDNS
- CSMTP
- DLDAP
Show answer & explanationAnswer & explanation
Correct answer: D. LDAP
LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing and maintaining distributed directory information services. It is commonly used for centralized authentication and authorization by storing user credentials, groups, and permissions, making it ideal for 'centralizing user authentication and authorization across multiple disparate applications and services' and 'single sign-on (SSO) capability'.
Why the other options are wrong
- A. FTP (File Transfer Protocol) is for file transfer, not identity management.
- B. DNS (Domain Name System) resolves domain names to IP addresses, not for user authentication.
- C. SMTP (Simple Mail Transfer Protocol) is for sending email, not identity management.
LDAP (Lightweight Directory Access Protocol)
An open, vendor-neutral, industry-standard application protocol for accessing and maintaining distributed directory information services over an IP network.
- Commonly used for centralized authentication (e.g., Active Directory).
- Stores user accounts, passwords, groups, and other attributes.
- Enables Single Sign-On (SSO) across applications.
Memory trick: IAM Protocols: 'LDAP' leads the way for identity!