OpenStack OpenStack Identity (Keystone)

Question 1

Which OpenStack service provides Identity, Authentication, and Authorization services?

Accepted Answer

Keystone

Answer

Nova

Answer

Glance

Answer

Barbican

Question 2

What is a Keystone 'token' used for?

Accepted Answer

A credential issued after authentication that authorizes API requests to OpenStack services

Answer

Encrypting data stored in Swift containers

Answer

A license key for OpenStack commercial support

Answer

A network access control identifier for Neutron

Question 3

What is a Keystone 'project' (formerly 'tenant') in OpenStack?

Accepted Answer

An organizational unit that groups resources and users for isolation and quota management

Answer

A software development project tracked in Launchpad

Answer

A service endpoint registered in the catalog

Answer

A Keystone policy file defining role permissions

Question 4

Which Keystone token format is the current default and does not require backend validation for each request?

Accepted Answer

Fernet token

Answer

UUID token

Answer

PKI token

Answer

SAML token

Question 5

What is a Keystone 'role' used for?

Accepted Answer

Granting permissions to users by assigning named roles within a project

Answer

Defining the geographic region where a service is deployed

Answer

Creating a service endpoint for a new OpenStack component

Answer

Setting resource quotas for a specific project

Question 6

What is the Keystone service catalog?

Accepted Answer

A list of all OpenStack services and their API endpoints published to authenticated users

Answer

A database of registered cloud providers using OpenStack

Answer

An inventory of VM flavors and images available per region

Answer

A list of Keystone policies in YAML format