MongoDB Security and Administration Flashcards

What is role-based access control (RBAC) in MongoDB?

Answer: A system where privileges are granted through roles assigned to users

MongoDB's RBAC grants users privileges through roles, where each role defines a set of allowed actions on specified resources.

Which built-in MongoDB role provides full administrative access to all databases?

Answer: root

The root role provides all privileges on all resources, giving unrestricted access to the entire MongoDB deployment.

What does MongoDB's TLS/SSL configuration protect?

Answer: Data in transit between clients and servers

TLS/SSL encrypts network communications between MongoDB clients, servers, and replica set members to prevent eavesdropping and tampering.

What is the purpose of the mongodump utility?

Answer: Creates a binary export of a MongoDB database or collection

mongodump creates a binary dump (BSON files) of a MongoDB database or collection, which can be restored using mongorestore.

What authentication mechanism does MongoDB use by default for username/password authentication?

Answer: SCRAM (Salted Challenge Response Authentication Mechanism)

SCRAM-SHA-1 and SCRAM-SHA-256 are MongoDB's default authentication mechanisms, providing secure password-based authentication without transmitting passwords.

What is MongoDB's Encrypted Storage Engine used for?

Answer: Encrypting data files at rest using AES-256 encryption

MongoDB Enterprise's encrypted storage engine encrypts all data files at rest using AES-256, protecting data if physical storage is compromised.