Questions

1. The dashboard is insecure.

   A. True

   B. False

2. How can the dashboard identify a user?

   A. The options are either no authentication, or a token injected from a reverse proxy

   B. Username and password

   C. ServiceAccount

   D. Multi-factor authentication

3. How does the dashboard track session state?

   A. Sessions are stored in etcd.

   B. Sessions are stored in custom resource objects called DashboardSession.

   C. There are no sessions.

   D. If a token is uploaded, it's encrypted and stored in the browser as a cookie.

4. When using a token, how often can the dashboard refresh it?

   A. Once a minute

   B. Every thirty seconds

   C. When the token expires

   D. None of the above

5. What's the best way to deploy the dashboard?

   A. Using kubectl port-forward

   B. Using kubectl proxy

   C. With a secret ingress host

   D. Behind a reverse proxy

6. The dashboard doesn't support impersonation.

   A. True

   B. False

7. OpenUnison is the only reverse proxy that supports the dashboard.

   A. True

   B. False