Which protocol is primarily used for directory services and storing user information?

Which protocol is primarily used for directory services and storing user information?

• A. RADIUS
• B. TACACS+
• C. LDAP
• D. DNS

Answer: (C)

LDAP is the protocol designed for directory services and storing user information. It allows clients to query and update a centralized directory that holds user attributes such as user IDs, names, emails, and group memberships in a hierarchical structure. This makes LDAP ideal for centralized authentication and authorization across an organization, since many systems can rely on a single source of truth for who exists in the network and what they are allowed to do. LDAP supports essential operations like search, add, modify, and delete, and is widely implemented by directories such as OpenLDAP and Microsoft Active Directory (often used with LDAPS for encryption). RADIUS and TACACS+ are AAA protocols focused on authenticating and authorizing access to network devices and services, not on maintaining a comprehensive directory of user accounts and attributes. DNS, on the other hand, resolves names to IP addresses and related data, not user identity or directory information.

LDAP is the protocol designed for directory services and storing user information. It allows clients to query and update a centralized directory that holds user attributes such as user IDs, names, emails, and group memberships in a hierarchical structure. This makes LDAP ideal for centralized authentication and authorization across an organization, since many systems can rely on a single source of truth for who exists in the network and what they are allowed to do. LDAP supports essential operations like search, add, modify, and delete, and is widely implemented by directories such as OpenLDAP and Microsoft Active Directory (often used with LDAPS for encryption).

RADIUS and TACACS+ are AAA protocols focused on authenticating and authorizing access to network devices and services, not on maintaining a comprehensive directory of user accounts and attributes. DNS, on the other hand, resolves names to IP addresses and related data, not user identity or directory information.