156-215 Check Point Security Administration NGX (156-215.1)
Note 2: 156-215 Answers are not shown in demo questions.
Exhibits and Answers are only provided in the Full Version.
Demo Question 20.
In NGX, what happens if a Distinguished Name (ON) is NOT found in LADP?
A. NGX takes the common-name value from the Certificate subject, and searches the LADP account unit for a matching user id
B. NGX searches the internal database for the username
C. The Security Gateway uses the subject of the Certificate as the ON for the initial lookup
D. If the first request fails or if branches do not match, NGX tries to map the identity to the user id attribute
E. When users authenticate with valid Certificates, the Security Gateway tries to map the identities with users registered in the extemal LADP user database
Display Answer
Purchase Full Version:
156-215 Printable PDF Prep Guide $49.95 BUY NOW!
156-215 Test Simulation Engine $69.95 BUY NOW!
156-215 PDF & Test Simulation Engine $99.95 BUY NOW!
Answer: D
Explanation: Retrieving Information from a SmartDirectory (LDAP) server
When a Gateway requires user information for authentication purposes, it searches
for this information in three different places:
1 The first place that is queried is the internal users database.
2 If the specified user is not defined in this database, the Gateway queries the
SmartDirectory (LDAP) servers defined in the Account Unit one at a time, and
according to their priority. If for some reason the query against a specified
SmartDirectory (LDAP) server fails, for instance the SmartDirectory (LDAP)
connection is lost, the SmartDirectory (LDAP) server with the next highest priority
is queried. If there is more than one Account Unit, the Account Units are queried
concurrently. The results of the query are either taken from the first Account Unit
to meet the conditions, or from all the Account Units which meet the conditions. The
choice between taking the result of one Account Unit as opposed to many is a matter
of Gateway configuration.
3 If the information still cannot be found, the Gateway uses the external users
template to see if there is a match against the generic profile. This generic profile
has the default attributes applied to the specified user.
- Based on the latest 156-215 exam objectives!
- Designed like actual 156-215 exam questions!
- 100% Verified Realistic 156-215 Exam Questions and Answers!
- Exhibits, Drag&Drop and Simulation 156-215 Questions Included!
- Constantly Updated Guide to Reflect the Current 156-215 Exams!
- Detailed Explanations for Most Guide Practice Exams!
Sponsored Links
NY, USA
London, UK
England
Keyword
