What are the key attributes stored for a user in a directory?

• A. User ID, username, email, name, department, role, group memberships, license/plan, status, password hash, MFA status.
• B. User's favorite color and hobby.
• C. Last login time only.
• D. Password hints.

Answer: (A)

Directories store user identity and entitlement data that support authentication and access control. The most complete set of attributes includes a unique identifier (user ID), a login name (username), contact details (email), and the person’s display name. It also captures where they fit in the organization (department) and what they do (role), which helps apply appropriate policies and workflows. Group memberships are important because access rights are often granted by group, so listing those memberships ties the user to the correct security and resource policies. License or plan information indicates which services and features the user is entitled to use. The status field shows whether the account is active or suspended, which directly affects whether access is allowed. Storing the password as a hash protects credentials, and tracking MFA status shows whether multi-factor authentication is in place or required, strengthening security.

Other attributes like a favorite color or hobby don’t influence identity or access decisions. Last login time might be useful for auditing in some systems, but it’s not a core identity or entitlement attribute, and password hints are not securely stored in directories.