Bookmark this page

Quiz: The OpenShift OAuth Server and Identity Providers

The OpenShift OAuth Server and Identity Providers

Choose the correct answers to the following questions:


  1. 1.

    Which authentication method handles user authentication in OpenShift, and is not present in Kubernetes?

    A

    Client certificates

    B

    OAuth server

    C

    Internal Certificate Authority

  2. 2.

    Which is the cluster administrator user that the OpenShift installation process creates?

    A

    root

    B

    admin

    C

    k8sadmin

    D

    kubeadmin

  3. 3.

    Which three API resources are API extension resources that OpenShift OAuth defines? (Choose three.)

    A

    Users

    B

    Identities

    C

    Roles

    D

    Groups

    E

    Role bindings

  4. 4.

    Your company configures two IdPs, htpasswd and LDAP, in the internal OpenShift OAuth server. Because both IdPs have some users in common, you must configure the mapping method parameter in the OAuth server to avoid any collision between user identities. Which mapping method maps the identities from both IdPs to the same user and avoids collisions?

    A

    claim

    B

    add

    C

    lookup

  5. 5.

    In OpenShift, how does the OAuth server handle user authentication?

    A

    The OAuth server relies on client certificates that the IdP issues.

    B

    The OAuth server delegates authentication to the IdP and generates a user OAuth token after the IdP validates the user credentials.

    C

    The OAuth server uses OAuth tokens that the IdP generates.

  6. 6.

    In Kubernetes and OpenShift, what is the default behavior for unauthenticated users when accessing the API server?

    A

    They are assigned to the system:unauthenticated group with limited access.

    B

    They are granted full cluster-admin privileges by default.

    C

    They are denied any access to the API resources.

    D

    They are assigned to the system:authenticated group with limited access.

Revision: do380-4.14-397a507