OpenStack OpenStack Identity (Keystone) 3

Question 1

What OpenStack CLI command is used to list all Keystone projects visible to your user?

Accepted Answer

openstack project list

Answer

openstack tenant list

Answer

keystone project-list

Answer

openstack domain list

Question 2

Which Keystone API version is current and recommended for new deployments?

Accepted Answer

v3

Answer

v1

Answer

v2.0

Answer

v4

Question 3

What is the 'admin' role typically granted to do in OpenStack?

Accepted Answer

Perform cloud-wide administrative operations across all projects and services

Answer

Only manage VMs within a single project

Answer

Read-only access to all OpenStack resources

Answer

Manage only network resources in Neutron

Question 4

What is the purpose of 'scoped tokens' in Keystone v3?

Accepted Answer

Tokens bound to a specific project or domain, limiting their authorization scope

Answer

Tokens that are only valid for API calls to a specific service like Nova

Answer

Tokens with a shorter expiration time for security

Answer

Tokens encrypted with a project-specific key

Question 5

In OpenStack, what is an 'endpoint' registered in Keystone?

Accepted Answer

A URL representing a specific OpenStack service API in a specific region and interface type

Answer

A physical network interface on a compute node

Answer

A VM instance accessible via floating IP

Answer

A Neutron port connected to an external network

Question 6

What does 'keystoneauth1' provide in the OpenStack client ecosystem?

Accepted Answer

A Python library providing authentication plugins and session management for OpenStack clients

Answer

A CLI tool for managing Keystone users and policies

Answer

A Keystone middleware for validating tokens in API requests

Answer

An automated tool for rotating Fernet encryption keys