Why Redis security matters - Test Your Understanding

Practice - 5 Tasks

1fill in blank

easy

Complete the code to set a password for Redis.

Redis

requirepass [1]

Drag options to blanks, or click blank then click option'

A6379

Blocalhost

Credis

Dmypassword

Attempts:

3 left

💡 Hint

Common Mistakes

Using the port number or hostname as password

Leaving password empty

Setting requirepass with a password protects Redis from unauthorized access.

2fill in blank

medium

Complete the command to connect to Redis with authentication.

Redis

redis-cli -a [1]

Drag options to blanks, or click blank then click option'

Amypassword

Blocalhost

C6379

Dauth

Attempts:

3 left

💡 Hint

Common Mistakes

Using hostname or port instead of password

Omitting the password

The -a option is used to provide the password when connecting to Redis.

3fill in blank

hard

Fix the error in the Redis config line to disable external access.

Redis

bind [1]

Drag options to blanks, or click blank then click option'

A0.0.0.0

Blocalhost

C127.0.0.1

D::

Attempts:

3 left

💡 Hint

Common Mistakes

Binding to all interfaces

Using hostname instead of IP

Binding Redis to 127.0.0.1 restricts access to the local machine only, improving security.

4fill in blank

hard

Fill both blanks to configure Redis to require password and bind only locally.

Redis

bind [1]
requirepass [2]

Drag options to blanks, or click blank then click option'

A127.0.0.1

Bmypassword

C0.0.0.0

Dpassword123

Attempts:

3 left

💡 Hint

Common Mistakes

Using public IP for bind

Leaving password blank

Binding to 127.0.0.1 restricts access to local machine and setting requirepass enforces authentication.

5fill in blank

hard

Fill all three blanks to create a Redis ACL user with password and limited commands.

Redis

ACL SETUSER [1] on >[2] ~* +[3]

Drag options to blanks, or click blank then click option'

Areadonly

Breadonlypass

Cget

Dallcommands

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'allcommands' instead of specific commands

Omitting password

Wrong user name

This command creates a user named readonly with password readonlypass and allows only the get command.