Lab LDAP configuration contains: set cnid "sAMAccountName" set dn "ou=Finance,dc=lab,dc=local" Users in another OU are not found despite correct passwords. Which field should be investigated first?

Choose the single best answer.

A.The cnid attribute, while leaving the excluding search base unchanged
B.The authentication idle duration
C.The LDAP transport port, despite successful bind/search in the selected OU
D.The LDAP search base dn

Show the answer and explanation

✓ Correct answer

The LDAP search base dn

A base scoped to the Finance OU can exclude users outside it. Correct naming attributes and transport do not expand that search hierarchy, and an authentication timer does not locate missing directory entries.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.