ForgeRock AIC Practice Exam

Which dependency is required to synchronize hashed user passwords from a ForgeRock Directory Services deployment into ForgeRock Identity Cloud?

1. User passwords in DS must be stored using a one-way hash password storage scheme that is compatible with Identity Cloud password policies

2. Passwords must be stored in plain text format

3. Passwords must be encrypted using symmetric encryption

4. DS must not have any password policies in place

The correct answer is: User passwords in DS must be stored using a one-way hash password storage scheme that is compatible with Identity Cloud password policies

The requirement for synchronizing hashed user passwords from a ForgeRock Directory Services (DS) deployment into ForgeRock Identity Cloud is that user passwords must be stored using a one-way hash password storage scheme that is compatible with Identity Cloud password policies. This is because a one-way hash function ensures that passwords are not stored in a way that can be easily reverse-engineered, thereby enhancing security. This method is aligned with standard security practices, as it prevents exposure of the actual passwords while still allowing for verification during authentication processes. Compatibility with Identity Cloud's password policies is crucial, as it ensures that the hashed passwords adhere to the specific requirements set out by the Identity Cloud, enabling successful synchronization and authentication. In contrast, storing passwords in plain text would pose a significant security risk, making them vulnerable to unauthorized access. Similarly, using symmetric encryption would involve the need for key management and decryption, which complicates processes and does not align with best practices for password storage. Lastly, having no password policies in place would undermine the consistency and security requirements necessary for managing user identities effectively across systems. Therefore, the requirement for a compatible one-way hash storage scheme is essential for secure and efficient synchronization of user passwords.