Jenkins Jenkins Security

Question 1

Where is Jenkins security configuration managed?

Accepted Answer

Manage Jenkins > Configure Global Security

Answer

The Configure Global Security page is where you enable security, set the security realm, and configure authorization strategy.

Question 2

Which security realm allows Jenkins to use its own user database for authentication?

Accepted Answer

Jenkins' own user database

Answer

The 'Jenkins' own user database' realm stores users in Jenkins' internal database, managed via the Manage Users page.

Question 3

What is the Matrix-based security authorization strategy in Jenkins?

Accepted Answer

A permission model that assigns specific permissions to individual users or groups in a table

Answer

Matrix-based security presents a permission grid where admins can grant specific permissions (like build, configure, view) to each user or group.

Question 4

What does enabling 'Prevent Cross Site Request Forgery exploits' do in Jenkins?

Accepted Answer

Adds a CSRF protection token (crumb) required on all state-changing HTTP requests

Answer

CSRF protection in Jenkins requires a 'crumb' token with every mutating HTTP request, preventing cross-site request forgery attacks.

Question 5

Which Jenkins credential type is used to store a username and password pair?

Accepted Answer

Username with password

Answer

The 'Username with password' credential type stores a username/password pair and can be bound in pipelines using `withCredentials`.

Jenkins Practice Test