Chapter 9

1. Correct answer: (A) False. The Dashboard and make consistent throughout chapter is not inherently insecure; how it's deployed matters.
2. Correct answer: (A) No authentication, a token, injected from a reverse proxy. The dashboard has no way of collecting a username, password, or second factor.
3. Correct answer: (D) If a token is uploaded, it's encrypted and stored in the browser as a cookie. The dashboard doesn't persist the session in any backend.
4. Correct answer: (D) None of the above. The dashboard doesn't know how to refresh a token.
5. Correct answer: (D) Behind a reverse proxy. Use a reverse proxy to manage the login process, control sessions, and add multi-factor authentication.
6. Correct answer: (B) False. The 2.0+ versions of the dashboard support impersonation.
7. Correct answer: (B) False. Any reverse proxy can, if configured properly.