CCAAK Question #7: Real Exam Question with Answer & Explanation

The correct answer is D. Super Users -> Allow ACL -> Deny ACL-> Deny. Kafka checks permissions in the following sequence: 1. Super Users: If the user is a super user (defined via super.users), access is granted 2. Allow ACL: If there is a matching Allow ACL, Kafka proceeds to the next step. 3. Deny ACL: If there is a matching Deny ACL, access is de

Question

What is the correct permission check sequence for Kafka ACLs?

Options

ASuper Users -> Deny ACL -> Allow ACL -> Deny
BAllow ACL -> Deny ACL -> Super Users -> Deny
CDeny ACL -> Deny -> Allow ACL -> Super Users
DSuper Users -> Allow ACL -> Deny ACL-> Deny

Explanation

Kafka checks permissions in the following sequence: 1. Super Users: If the user is a super user (defined via super.users), access is granted 2. Allow ACL: If there is a matching Allow ACL, Kafka proceeds to the next step. 3. Deny ACL: If there is a matching Deny ACL, access is denied (even if an Allow exists). 4. Deny: If no matching ACLs are found, access is denied by default. This order ensures that super users bypass ACLs, denials override allows, and default is deny.

Community Discussion

No community discussion yet for this question.

Full CCAAK Practice