MCP Security and Governance

1. What is the primary goal of authenticating connections in MCP security?

To allow anonymous clients access To ensure every connection is secure To limit connections to read-only access To simplify the auditing process

2. Which principle is highlighted as crucial for managing agent capabilities in MCP?

Unlimited access for all agents Least-privilege capabilities Maximum tool exposure Full administrative rights

3. What is a key action to take regarding third-party MCP servers to mitigate supply-chain risk?

Automatically trust all connected servers Treat responses from trusted servers as reliable Pin and vet the servers you connect to Allow silent server changes

4. What type of information should be maintained to enhance governance in MCP security?

General server performance metrics An inventory of every server and its tools User feedback on server usability A log of every server outage

Continue: What Is an Agent → Review this lesson Retake quiz