An LDAP client uses non-TLS SASL signing and must keep directory content confidential in transit. Which additional protection can meet that requirement?

Choose the single best answer.

A.Apply channel-binding policy without establishing a TLS session
B.Use SASL sealing or TLS
C.Use an unsigned SASL bind with a stronger account password
D.Require signing alone and assume it encrypts content

Show the answer and explanation

✓ Correct answer

Use SASL sealing or TLS

SASL sealing or TLS supplies confidentiality. Signing alone supplies integrity/authenticity without content encryption; a stronger password does not encrypt an unsigned session. Channel binding requires an applicable TLS session and is not a substitute for transport encryption.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.