PrepAway - Latest Free Exam Questions & Answers

Which of the following does not correctly describe a directory service?

Which of the following does not correctly describe a directory service?

PrepAway - Latest Free Exam Questions & Answers

A.
It manages objects within a directory by using namespaces.

B.
It enforces security policy by carrying out access control and identity management functions.

C.
It assigns namespaces to each object in databases that are based on the X.509 standard and are accessed by LDAP.

D.
It allows an administrator to configure and manage how identification takes place within the network.

Explanation:
C: Most enterprises have some type of directory that contains information pertaining to the company’s network resources and users. Most directories follow a hierarchical database
format, based on the X.500 standard (not X.509), and a type of protocol, as in Lightweight Directory Access Protocol (LDAP), that allows subjects and applications to interact with the
directory. Applications can request information about a particular user by making an LDAP request to the directory, and users can request information about a specific resource by
using a similar request. A directory service assigns distinguished names (DNs) to each object in databases based on the X.500 standard that are accessed by LDAP. Each
distinguished name represents a collection of attributes about a specific object and is stored in the directory as an entry.
A is incorrect because objects within hierarchical databases are managed by a directory service. The directory service allows an administrator to configure and manage how
identification, authentication, authorization, and access control take place within the network. The objects within the directory are labeled and identified with namespaces, which is how
the directory service keeps the objects organized.
B is incorrect because directory services do enforce the configured security policy by carrying out access control and identity management functions. For example, when a user logs
into a domain controller in a Windows environment, the directory service (Active Directory) determines what network resources she can and cannot access.
D is incorrect because directory services do allow an administrator to configure and manage how identification takes place within the network. It also allows for the configuration and
management of authentication, authorization, and access control.


Leave a Reply