1Z0-133 practice question 7 of 25

You are using the Embedded LDAP that is supplied by Oracle WebLogic Server. Which three statements are true? (Choose three.)

Full set: 126 questions
Answer options
A: The Embedded LDAP can be accessed by an external LDAP viewer Correct answer
B: The Embedded LDAP cannot be used in a production environment Correct answer
C: The Embedded LDAP uses the file system to store WebLogic security provider data Correct answer
D: The Embedded LDAP uses the database to store WebLogic security provider data
E: The Embedded LDAP can be used to store user, group, security roles and security policies for the WebLogic security providers
Correct Answer:
A. The Embedded LDAP can be accessed by an external LDAP viewer; B. The Embedded LDAP cannot be used in a production environment; C. The Embedded LDAP uses the file system to store WebLogic security provider data
Explanation

The Embedded LDAP server is an integral part of the default WebLogic Server security configuration. It acts as the data store for the default security providers. This server is file-based, with its data files located within the domain's directory structure (C). For administrative and diagnostic purposes, it can be accessed using any standard external LDAP browser, as it listens on the administration port (A). Oracle strongly advises against using the Embedded LDAP in production environments due to limitations in performance, scalability, and enterprise management features, recommending an external, production-grade LDAP server instead. For exam purposes, this strong recommendation is treated as a prohibition (B).

Why Incorrect

D. The Embedded LDAP uses the file system for its data store, not a database. While WebLogic Server can be configured with an RDBMS-based security store, that is a different provider and not the Embedded LDAP server itself.
E. This statement is misleadingly general. The Embedded LDAP is the default repository for the default WebLogic security providers. It is not a general-purpose store for any and all "WebLogic security providers" that an administrator might configure.

References

1. Oracle® Fusion Middleware Securing Oracle WebLogic Server 12c (12.2.1.4.0)

Chapter 6: Managing the Embedded LDAP Server.

For A: Section "Browsing the Embedded LDAP Server" states

"You can browse the contents of the embedded LDAP server using an external LDAP browser..."

For B: The introductory paragraph of Chapter 6 states

"The embedded LDAP server is suitable for environments with a small number of users... For production environments

Oracle recommends that you use an external LDAP server."

For C: Section "Data Files for the Embedded LDAP Server" specifies

"The data files for the embedded LDAP server are located in the domainname/servers/servername/data/ldap directory."

For E: Section "The Embedded LDAP Server and the Default Security Configuration" clarifies its role specifically for the default providers: "The WebLogic Security providers use the embedded LDAP server to store user and group information. The default (WebLogic) security providers also store security roles and security policies in the embedded LDAP server." This specificity contrasts with the overly general statement in option E.

Scroll to Top