CompTIA Server+ (SK0-005)Security and Disaster RecoveryMedium
A company is implementing a new identity and access management (IAM) solution. The security architect proposes using a centralized directory service that stores user credentials and allows for single sign-on (SSO) across various applications. This service will use a hierarchical structure to store information about users, groups, and network devices. Which protocol is most commonly associated with such a directory service?
- ASMTP
- BSSH
- CLDAP
- DSNMP
Show answer & explanationAnswer & explanation
Correct answer: C. LDAP
LDAP (Lightweight Directory Access Protocol) is the industry standard protocol for accessing and maintaining distributed directory information services. It is widely used for centralized authentication and authorization, supporting hierarchical structures for users, groups, and resources, which aligns perfectly with the described scenario.
Why the other options are wrong
- A. SMTP is used for sending email, unrelated to directory services.
- B. SSH is a secure shell protocol for remote command-line access, not a directory service protocol.
- D. SNMP is used for network device management and monitoring, not for user directories.
LDAP
Lightweight Directory Access Protocol is an open, vendor-neutral, industry-standard application protocol for accessing and maintaining distributed directory information services.
- Used for centralized authentication and authorization.
- Supports hierarchical data structures.
- Commonly used with Active Directory or OpenLDAP.
Memory trick: LDAP helps you find your way through the user tree.