Authentication mechanisms in MongoDB - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of authentication in MongoDB?

Authentication in MongoDB verifies the identity of users trying to access the database to ensure only authorized users can connect and perform actions.

beginner

Name two common authentication mechanisms supported by MongoDB.

MongoDB supports SCRAM (Salted Challenge Response Authentication Mechanism) and x.509 certificate authentication as common methods.

intermediate

How does SCRAM authentication work in MongoDB?

SCRAM uses a username and password. The password is salted and hashed. The server and client exchange challenges to verify the password without sending it directly.

intermediate

What is x.509 certificate authentication in MongoDB?

x.509 authentication uses SSL/TLS certificates to verify client identity. The client presents a certificate signed by a trusted authority to connect securely.

beginner

Why is enabling authentication important in MongoDB?

Without authentication, anyone can access the database, risking data theft or damage. Authentication protects data by allowing only verified users to connect.

Which authentication mechanism uses username and password with salted hashing in MongoDB?

A SCRAM

B x.509 certificate

C LDAP

D Kerberos

SCRAM uses username and password with salted hashing to authenticate users.

What does x.509 authentication in MongoDB rely on?

A SSL/TLS certificates

B Username only

C Password hashing

D IP address

x.509 authentication uses SSL/TLS certificates to verify client identity.

Why should authentication be enabled in MongoDB?

A To speed up queries

B To disable network access

C To allow anonymous access

D To protect data by verifying users

Authentication protects data by allowing only verified users to access the database.

Which of these is NOT a MongoDB authentication mechanism?

A SCRAM

B OAuth

C LDAP

D x.509 certificate

OAuth is not a native MongoDB authentication mechanism.

In SCRAM, what is the purpose of salting the password?

A To make password storage faster

B To prevent password reuse

C To protect against rainbow table attacks

D To encrypt the password

Salting adds random data to passwords to protect against rainbow table attacks.

Explain how SCRAM authentication works in MongoDB and why it is secure.

Think about how the password is protected during login.

Describe the role of x.509 certificates in MongoDB authentication.

Consider how certificates prove who you are.