Which protocol would you use to query a directory service to retrieve user attributes?

Prepare for the Information Security Principles and Frameworks Test. Enhance your understanding with detailed questions, hints, and explanations. Ace your exam with confidence!

Multiple Choice

Which protocol would you use to query a directory service to retrieve user attributes?

Explanation:
Querying a directory service for user attributes is what LDAP is designed to do. LDAP provides a standard way to access and search a directory, returning attribute values for entries such as users. You can bind to the directory, perform a search with a base distinguished name and a filter, and retrieve attributes like common name, email, or group memberships. This centralized directory access is common in environments using OpenLDAP or Active Directory, making LDAP the natural tool for retrieving user attributes. DNS, on the other hand, maps hostnames to IP addresses and handles name resolution, not user profile data. SNMP is used for monitoring and managing network devices, not for directory queries. SMTP is the protocol for delivering email between servers, not for retrieving directory information. So for retrieving user attributes from a directory service, LDAP is the best choice.

Querying a directory service for user attributes is what LDAP is designed to do. LDAP provides a standard way to access and search a directory, returning attribute values for entries such as users. You can bind to the directory, perform a search with a base distinguished name and a filter, and retrieve attributes like common name, email, or group memberships. This centralized directory access is common in environments using OpenLDAP or Active Directory, making LDAP the natural tool for retrieving user attributes.

DNS, on the other hand, maps hostnames to IP addresses and handles name resolution, not user profile data. SNMP is used for monitoring and managing network devices, not for directory queries. SMTP is the protocol for delivering email between servers, not for retrieving directory information.

So for retrieving user attributes from a directory service, LDAP is the best choice.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy