OpenStack OpenStack Identity (Keystone) 3

Question 1

What OpenStack CLI command is used to list all Keystone projects visible to your user?

Accepted Answer

openstack project list

Answer

The 'openstack project list' command displays all projects the authenticated user can access.

Question 2

Which Keystone API version is current and recommended for new deployments?

Accepted Answer

v3

Answer

Keystone API v3 is the current, supported version with full support for domains, federation, and application credentials.

Question 3

What is the 'admin' role typically granted to do in OpenStack?

Accepted Answer

Perform cloud-wide administrative operations across all projects and services

Answer

The 'admin' role in OpenStack grants cloud-wide administrative privileges to manage resources across all projects.

Question 4

What is the purpose of 'scoped tokens' in Keystone v3?

Accepted Answer

Tokens bound to a specific project or domain, limiting their authorization scope

Answer

Scoped tokens in Keystone v3 are bound to a specific project or domain, limiting the authorization context of the token.

Question 5

In OpenStack, what is an 'endpoint' registered in Keystone?

Accepted Answer

A URL representing a specific OpenStack service API in a specific region and interface type

Answer

A Keystone endpoint is a URL entry in the service catalog for a specific service, region, and interface (public/internal/admin).

OpenStack Practice Test