A corporate requirement exists that all data is to be protected on any system where it exists. What steps would you take, as a Kafka Administrator, to protect the data at rest in a Kafka Cluster you…

Question

Options

• AYou can run brokers on a machine with an encrypted file system
• BYou can use SSL to encrypt data from the producer
• CKafka brokers can natively encrypt data if you set a configuration option in their server.properties
• DYou can programmatically encrypt data at the producer and decrypt it at the consumer

• A
  68% (13)
• B
  21% (4)
• C
  11% (2)

Explanation

To protect data at rest in a Kafka cluster, the best steps to take are: This is one of the most effective ways to protect data at rest in Kafka. By running Kafka brokers on machines with an encrypted file system (e.g., using full disk encryption or file-level encryption), you ensure that the actual data stored on disk (the logs and topic data) is encrypted, even if someone gains unauthorized access to the disk or filesystem. While this requires additional application-level logic, it is another valid approach to protect data at rest. By encrypting the data at the producer before sending it to Kafka, and decrypting it at the consumer, you can ensure that even if the data is stored in plaintext on the Kafka brokers, it remains protected from unauthorized access. This approach is commonly used in scenarios where you need end-to-end encryption, and the security of the data during transit and at rest is

No community discussion yet for this question.