Which of the following protocols can be used to secure an LDAP service against anonymous queries?
Which of the following protocols can be used to secure an LDAP service against anonymous queries?
NTLM can be used to secure LDAP services against anonymous queries by using it as an authentication mechanism to ensure that only legitimate users can access the service. NTLM provides user authentication and helps in preventing unauthorized and anonymous access to the LDAP directory.
A. NTLM Like V11 Q240 CEH Book V12 Module 04 Page 503 from book : "Use NT LAN Manager (NTLM), Kerberos, or any basic authentication mechanism to limit access to legitimate users."
This is a poorly worded question with two correct answers, A. NTLM and B. RADIUS. If you are an Information Security purist, you will argue that B. RADIUS is superior to A. NTLM. But if you want to pass the exam you will select A. NTLM which is the official CEH answer per the CEH Book V12 Module 04. This was an exam question for me when I took the exam on 13 Dec 2023.
This is the way
A. NTLM CEH Book v12 Module 04 Page 338 "Use NT LAN Manager (NTLM), Kerberos, or any basic authentication mechanism to limit access to legitimate users."
CEH Book Oficial V12 (copy - paste) Use NT LAN Manager (NTLM), Kerberos, or any basic authentication mechanism to limit access to legitimate users
B. RADIUS is a networking protocol that provides centralized authentication, authorization, and accounting management for users who connect to and use network resources. RADIUS can be used to secure LDAP services by requiring users to provide valid credentials before they can access the LDAP service. This can help prevent anonymous queries and unauthorized access to the LDAP directory.
Answer is Radius: B NTLM is an outdated authentication protocol that is vulnerable to attack. WPA is a wireless security protocol that is not designed to secure LDAP services. SSO is a single sign-on protocol that can be used to authenticate users to LDAP, but it does not prevent anonymous queries. Therefore, the best answer is B. RADIUS.
B. RADIUS
A. NTLM is the correct
A. NTLM is the correct option
if you ever taking the sec + you will understand why radius is the correct answer
RADIUS (Remote Authentication Dial-In User Service) is a networking protocol that provides centralized authentication, authorization, and accounting management for network access. It is commonly used for securing and managing access to network resources, including LDAP services.
B. RADIUS
B. RADIUS
B. RADIUS
A. NTLM
A. NTLM
A. NTLM