Question

With ___________ enabled, MongoDB forces all clients to identify themselves before granting access to the server.

(a) access

(b) authentication

(c) authorization

(d) all of the mentioned

This question was posed to me in an interview for internship.

I'm obligated to ask this question of Security Checklist in portion Production Checklist, Security Concepts and Network Security of MongoDB

Answer 1

The correct answer is (b) authentication

For explanation I would say: KDC uses the client’s secret and the server’s secret to construct the ticket which allows the client and server to mutually authenticate each other, while keeping the secrets hidden.