What protocol is used to access directory databases that store information about users and their privileges?

What protocol is used to access directory databases that store information about users and their privileges?

• A. Simple Mail Transfer Protocol (SMTP)
• B. Hypertext Transfer Protocol (HTTP)
• C. File Transfer Protocol (FTP)
• D. Lightweight Directory Access Protocol (LDAP)

Answer: (D)

Directory services organize identities, groups, and their attributes in a structured directory that needs to be efficiently queried for authentication and authorization. LDAP is the protocol designed specifically to access and manipulate that kind of directory data over the network. It supports binding (to authenticate), searching with filters, and reading or updating user attributes and group memberships, which is exactly what you need when you’re looking up who a user is and what privileges they have. It’s built for fast, read-heavy access and is widely used in centralized authentication and access control systems, such as single sign-on and directory-backed permission checks. In contrast, the other options serve different purposes: SMTP is for email transmission, HTTP is for web traffic, and FTP is for transferring files.None of these are optimized for accessing and managing directory information about users and their privileges, making LDAP the best fit for this role.

Directory services organize identities, groups, and their attributes in a structured directory that needs to be efficiently queried for authentication and authorization. LDAP is the protocol designed specifically to access and manipulate that kind of directory data over the network. It supports binding (to authenticate), searching with filters, and reading or updating user attributes and group memberships, which is exactly what you need when you’re looking up who a user is and what privileges they have. It’s built for fast, read-heavy access and is widely used in centralized authentication and access control systems, such as single sign-on and directory-backed permission checks.

In contrast, the other options serve different purposes: SMTP is for email transmission, HTTP is for web traffic, and FTP is for transferring files.None of these are optimized for accessing and managing directory information about users and their privileges, making LDAP the best fit for this role.