nerdexam
Confluent

CCAAK · Question #101

You run a large Kafka cluster on a well-known public cloud that uses the cloud provider's native filesystem encryption to encrypt data at rest. The brokers in this cluster authenticate clients using…

The correct answer is B. Create a new dedicated cluster for this requirement with brokers configured to listen on SSL. A dedicated cluster avoids multi-tenancy and ensures isolation of sensitive PII workloads. Configuring this cluster with SSL provides encryption in transit, and the cloud provider's filesystem encryption ensures encryption at rest. This fully satisfies the security and isolation

Apache Kafka Security

Question

You run a large Kafka cluster on a well-known public cloud that uses the cloud provider's native filesystem encryption to encrypt data at rest. The brokers in this cluster authenticate clients using the PLAINTEXT security protocol and this cluster is used only for ingesting log data. You receive a new requirement to ingest data from a source that publishes personally identified information (PII) data while satisfying the following conditions:

  • Data should be encrypted in transit
  • Data should be encrypted while at rest
  • No multi-tenancy

How can you satisfy this new requirement?

Options

  • AConfigure a new SSL listener on the existing cluster. PII data will be stored on new topics, so
  • BCreate a new dedicated cluster for this requirement with brokers configured to listen on SSL
  • CCreate a new dedicated cluster for this requirement with brokers configured to listen on
  • DCreate a new dedicated cluster for this requirement with brokers configured to listen on

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    80% (36)
  • C
    13% (6)
  • D
    4% (2)

Explanation

A dedicated cluster avoids multi-tenancy and ensures isolation of sensitive PII workloads. Configuring this cluster with SSL provides encryption in transit, and the cloud provider's filesystem encryption ensures encryption at rest. This fully satisfies the security and isolation

Topics

#PII data#SSL encryption#dedicated cluster#multi-tenancy

Community Discussion

No community discussion yet for this question.

Full CCAAK Practice