Jenkins Jenkins Security

Question 1

Where is Jenkins security configuration managed?

Accepted Answer

Manage Jenkins > Configure Global Security

Answer

Manage Jenkins > Manage Users

Answer

Manage Jenkins > Security Matrix

Answer

System > Security Settings

Question 2

Which security realm allows Jenkins to use its own user database for authentication?

Accepted Answer

Jenkins' own user database

Answer

LDAP

Answer

Unix user/group database

Answer

Active Directory

Question 3

What is the Matrix-based security authorization strategy in Jenkins?

Accepted Answer

A permission model that assigns specific permissions to individual users or groups in a table

Answer

A plugin that adds two-factor authentication

Answer

A network firewall matrix for Jenkins ports

Answer

An automated security scanning feature

Question 4

What does enabling 'Prevent Cross Site Request Forgery exploits' do in Jenkins?

Accepted Answer

Adds a CSRF protection token (crumb) required on all state-changing HTTP requests

Answer

Blocks external webhooks

Answer

Encrypts all form submissions

Answer

Requires HTTPS for all connections

Question 5

Which Jenkins credential type is used to store a username and password pair?

Accepted Answer

Username with password

Answer

Secret text

Answer

SSH Username with private key

Answer

Certificate

Question 6

What is the scope difference between 'Global' and 'System' credentials in Jenkins?

Accepted Answer

Global credentials are accessible from any job; System credentials are only accessible to Jenkins internals and plugins

Answer

Global credentials are encrypted; System credentials are plaintext

Answer

System credentials apply to all users; Global credentials apply to admins only

Answer

There is no functional difference