CCAAK · Question #101
You run a large Kafka cluster on a well-known public cloud that uses the cloud provider's native filesystem encryption to encrypt data at rest. The brokers in this cluster authenticate clients using…
The correct answer is B. Create a new dedicated cluster for this requirement with brokers configured to listen on SSL. A dedicated cluster avoids multi-tenancy and ensures isolation of sensitive PII workloads. Configuring this cluster with SSL provides encryption in transit, and the cloud provider's filesystem encryption ensures encryption at rest. This fully satisfies the security and isolation
Question
You run a large Kafka cluster on a well-known public cloud that uses the cloud provider's native filesystem encryption to encrypt data at rest. The brokers in this cluster authenticate clients using the PLAINTEXT security protocol and this cluster is used only for ingesting log data. You receive a new requirement to ingest data from a source that publishes personally identified information (PII) data while satisfying the following conditions:
- Data should be encrypted in transit
- Data should be encrypted while at rest
- No multi-tenancy
How can you satisfy this new requirement?
Options
- AConfigure a new SSL listener on the existing cluster. PII data will be stored on new topics, so
- BCreate a new dedicated cluster for this requirement with brokers configured to listen on SSL
- CCreate a new dedicated cluster for this requirement with brokers configured to listen on
- DCreate a new dedicated cluster for this requirement with brokers configured to listen on
How the community answered
(45 responses)- A2% (1)
- B80% (36)
- C13% (6)
- D4% (2)
Explanation
A dedicated cluster avoids multi-tenancy and ensures isolation of sensitive PII workloads. Configuring this cluster with SSL provides encryption in transit, and the cloud provider's filesystem encryption ensures encryption at rest. This fully satisfies the security and isolation
Topics
Community Discussion
No community discussion yet for this question.