Which of the following is a best practice when setting up a client to use the LDAPS protocol with a
server?
A.
The client should follow LDAP referrals to other secure servers on the network
B.
The client should trust the CA that signed the server’s certificate
C.
The client should present a self-signed certificate to the server
D.
The client should have access to port 389 on the server
Explanation:
Okay, LDAP over SSL (LDAPS) is where you are piping LDAP over SSL connection. Normal SSL requires that the server have a certificate that the client computer accepts. In reality, the client computer accepts the CA who issued the cert. If the client has their own self signed certificate, not sure why the server would accept it. I have to believe that B is the correct answer.
Its B