COA Security and Access Control

Question 1

Which OpenStack service handles authentication and authorization?

Accepted Answer

Keystone

Answer

Keystone is the central identity service for OpenStack, responsible for managing user authentication and authorization across all services. It verifies user credentials and determines what resources and actions a user is permitted to access based on their assigned roles and projects.

Question 2

What are OpenStack roles used for?

Accepted Answer

Control user permissions

Answer

In OpenStack, roles are used to define a set of permissions that can be assigned to users within specific projects (tenants). By assigning roles, administrators can control what actions users are authorized to perform and what resources they can access, implementing granular access control.

Question 3

What is the purpose of security groups in OpenStack?

Accepted Answer

Control network access

Answer

Security groups in OpenStack act as virtual firewalls for instances, controlling inbound and outbound network traffic. They define rules that specify which ports, protocols, and IP addresses are allowed to communicate with an instance, enhancing network security by filtering unwanted connections.

Question 4

How can you prevent unauthorized API access in OpenStack?

Accepted Answer

Require Keystone authentication

Answer

Keystone is the identity service that authenticates all API requests to OpenStack services. By requiring Keystone authentication, every interaction with the OpenStack API must be accompanied by a valid token issued by Keystone, ensuring that only authorized users or services can access and manipulate cloud resources.

Question 5

Which component is used to assign user roles in OpenStack?

Accepted Answer

Keystone

Answer

Keystone is OpenStack's identity service, responsible for providing authentication and authorization for all OpenStack components. It manages users, projects (tenants), and roles, making it the central component for assigning and controlling user access and permissions within the cloud environment.

(COA) Certified OpenStack Administrator Exam Practice Test

(COA) Certified OpenStack Administrator Exam Practice Test

COA Security and Access Control