Question

Point out the wrong statement.

(a) You must have the createUser action on a database to create a new user on that database

(b) You must have the grantRole action on a role’s database to grant the role to another user

(c) If your MongoDB deployment has no users, you must connect to mongod using the localhost exception

(d) None of the mentioned

This question was posed to me in an interview for job.

Question is taken from User and Role Management topic in division Production Checklist, Security Concepts and Network Security of MongoDB

Answer 1

Correct answer is (a) You must have the createUser action on a database to create a new user on that database

The best explanation: You can use –noauth option when starting mongod to gain full access the system.