OpenStack OpenStack Identity (Keystone)

Question 1

Which OpenStack service provides Identity, Authentication, and Authorization services?

Accepted Answer

Keystone

Answer

Keystone is the OpenStack Identity service that provides authentication, authorization, and service catalog functionality.

Question 2

What is a Keystone 'token' used for?

Accepted Answer

A credential issued after authentication that authorizes API requests to OpenStack services

Answer

A Keystone token is a credential that proves a user's identity and authorizes them to make API calls to OpenStack services.

Question 3

What is a Keystone 'project' (formerly 'tenant') in OpenStack?

Accepted Answer

An organizational unit that groups resources and users for isolation and quota management

Answer

A Keystone project is an isolated organizational container for grouping resources, users, and quotas in OpenStack.

Question 4

Which Keystone token format is the current default and does not require backend validation for each request?

Accepted Answer

Fernet token

Answer

Fernet tokens are the current default in OpenStack Keystone; they are lightweight, encrypted, and stateless (no persistence required).

Question 5

What is a Keystone 'role' used for?

Accepted Answer

Granting permissions to users by assigning named roles within a project

Answer

Keystone roles are named identifiers (e.g., 'admin', 'member') assigned to users within projects to define their permissions.

OpenStack Practice Test