CIAM Directory Services 2

Question 1

Which LDAP attribute is used to store the distinguished name of a group's members in Active Directory?

Accepted Answer

member

Answer

The 'member' attribute on a group object stores the DNs of its members, while 'memberOf' is a back-link attribute on the user object.

Question 2

What is the purpose of the Global Catalog in Active Directory?

Accepted Answer

Provides a partial replica of all objects in the forest to enable cross-domain searches

Answer

The Global Catalog holds a partial, read-only replica of all objects across all domains in the forest, enabling fast cross-domain searches without referrals.

Question 3

In an LDAP directory, what does a 'referral' response indicate?

Accepted Answer

The directory server does not hold the requested entry and points to another server

Answer

A referral (result code 10) tells the client that the target server does not have the requested data and provides a URL pointing to a server that may.

Question 4

Which replication topology model does Active Directory Sites and Services use by default to connect domain controllers?

Accepted Answer

KCC-generated spanning tree

Answer

The Knowledge Consistency Checker (KCC) automatically generates a bidirectional ring/spanning-tree replication topology between domain controllers within and between sites.

Question 5

What does the 'tombstoneLifetime' attribute in Active Directory control?

Accepted Answer

How long deleted objects are retained before being permanently purged

Answer

Tombstone lifetime defines how long deleted objects remain in the directory (default 180 days) so replication can propagate deletions before the object is fully purged.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Directory Services 2