Why Redis security matters - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why is securing Redis important?

Redis is often used to store important data. What is the main risk if Redis is left unsecured on a public network?

A Redis will slow down and stop working.

B Redis will automatically delete all data after 24 hours.

C Redis will refuse all connections from clients.

D Anyone can read or change the data without permission.

💡 Hint

Think about what happens if anyone can connect to your Redis server.

If Redis is not secured, anyone who can connect can read or modify your data. This can cause data loss or leaks.

❓ query_result

intermediate

What happens when Redis is accessed without authentication?

Assume Redis is configured with a password. What will happen if a client tries to run GET key1 without authenticating first?

Redis

GET key1

A Returns null without error.

B (error) NOAUTH Authentication required.

C Server crashes.

D Returns the value of key1.

💡 Hint

Redis requires clients to authenticate if a password is set.

When a password is set, Redis rejects commands from unauthenticated clients with a NOAUTH error.

📝 Syntax

advanced

Which Redis configuration line enables password authentication?

Choose the correct line to add in the Redis configuration file to require clients to authenticate with password mypassword.

A requirepass mypassword

B authpassword mypassword

C password mypassword

D setpass mypassword

💡 Hint

Check the official Redis config directive for password protection.

The correct directive is requirepass followed by the password.

❓ optimization

advanced

Best practice to limit Redis exposure on a server

You want to keep Redis running on your server but prevent it from being accessed from outside your local machine. What is the best configuration change?

A Bind Redis to 127.0.0.1 only.

B Bind Redis to 0.0.0.0 to accept all connections.

C Disable password authentication.

D Increase maxclients to 10000.

💡 Hint

Think about restricting network access to only local connections.

Binding Redis to 127.0.0.1 restricts access to the local machine, preventing remote connections.

🔧 Debug

expert

Why does this Redis command fail with NOAUTH error?

You run the command SET user:1 "Alice" on a Redis server that has requirepass secret123 set in its config. The command returns (error) NOAUTH Authentication required.. What is the reason?

A Redis does not support string values.

B The SET command is invalid syntax.

C You did not run AUTH with the password before the SET command.

D The password 'secret123' is incorrect.

💡 Hint

Think about the order of commands when authentication is required.

When Redis requires a password, clients must authenticate first using AUTH before running other commands.