Which two query types are available when an LDAP profile is configured? (Choose two.)

When configuring an LDAP profile on a Cisco security appliance, such as the Email Security Appliance (ESA), administrators define specific queries to interact with the directory server. The two primary query types available for configuration are user and group. A 'user' query is typically used for functions like recipient validation, authentication, or retrieving user-specific attributes. A 'group' query is used to determine if a user is a member of a specific directory group, which is essential for applying group-based policies for email or web traffic.

A. proxy consolidation: This term relates to the management of multiple proxy servers and is not a type of LDAP query.

C. recursive: While an LDAP search can be recursive (traversing a directory tree), "recursive" is a search characteristic, not a configurable query type within the LDAP profile itself.

E. routing: Routing is a function that may use data retrieved via an LDAP query (e.g., a user query fetching a mail-forwarding attribute), but it is not a fundamental query type.

1. Cisco Email Security Appliance (ESA) User Guides: The configuration process for LDAP profiles is detailed in the user guides for various AsyncOS versions. These guides explicitly show the creation of queries for different purposes

which are fundamentally categorized by the object being queried: a user or a group.

Source: Cisco AsyncOS 15.0 for Email Security User Guide

Reference: In the chapter "System Administration

" the section "LDAP" describes configuring LDAP profiles. The process involves creating queries for specific functions like "Recipient Validation" (a user-based query) and "Group Queries" (for policy matching). The configuration options are built around these two fundamental types.

2. Cisco Content Hub - ESA Configuration Example: Configuration examples and guides for integrating ESA with Active Directory via LDAP consistently demonstrate setting up queries for users and groups.

Source: Cisco Email Security Appliance Configuration Guides

Reference: In documents detailing LDAP integration

such as "ESA

SMA

and WSA: Active Directory (AD) Integration Configuration Example

" the steps involve creating an "Accept Query" to validate users and a "Group Query" to check group membership. These directly correspond to the 'user' and 'group' query types.