In this scenario, what is a primary requirement in the planning phase to ensure that LDAP can be used to authenticate users?

A company has a stringent set of security requirements that must be adhered to. They have a number of machines in the DMZ that are required to be either monitored or become event acquisition targets. In addition to this, all traffic on their network must be encrypted. All VLAN’s are firewalled. All users must authenticate to LDAPS and in all instances, security is of paramount importance.

In this scenario, what is a primary requirement in the planning phase to ensure that LDAP can be used to authenticate users?
A . A new self-signed certificate must be purchased for the LDAP server to ensure secure communication from the ObjectServer.
B . The LDAP self-signed root certificate issued by the Certificate Authority (CA) must be obtained and added to the ObjectServer key database.
C . The ObjectServer SSL certificate must be installed into the LDAP server repository.
D . A self-signed root certificate must be generated by the IBM Tivoli Netcool/OMNIbus Administrator and installed for LDAP over SSL communication.

Answer: A