An application fails only when LDAP channel binding is set to Always. It uses SASL over TLS but does not provide a valid CBT. What explains the failure?

Choose the single best answer.

A.Always requires a valid CBT for this applicable session
B.TLS makes every SASL client exempt from CBT
C.A longer password removes the CBT requirement
D.CBT applies only to unencrypted simple binds

Show the answer and explanation

✓ Correct answer

Always requires a valid CBT for this applicable session

TLS+SASL is the applicable CBT context, and Always rejects missing/invalid binding. TLS is not an exemption, unencrypted simple bind has no TLS binding context, and password length does not satisfy CBT.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.