What is the correct permission check sequence for Kafka ACLs?

The correct answer is D. Super Users -> Allow ACL -> Deny ACL-> Deny. Kafka checks permissions in the following sequence: 1. Super Users: If the user is a super user (defined via super.users), access is granted 2. Allow ACL: If there is a matching Allow ACL, Kafka proceeds to the next step. 3. Deny ACL: If there is a matching Deny ACL, access is…

Apache Kafka Security

Question

Options

ASuper Users -> Deny ACL -> Allow ACL -> Deny
BAllow ACL -> Deny ACL -> Super Users -> Deny
CDeny ACL -> Deny -> Allow ACL -> Super Users
DSuper Users -> Allow ACL -> Deny ACL-> Deny

How the community answered

(28 responses)

A
7% (2)
B
4% (1)
C
11% (3)
D
79% (22)

Explanation

Kafka checks permissions in the following sequence: 1. Super Users: If the user is a super user (defined via super.users), access is granted 2. Allow ACL: If there is a matching Allow ACL, Kafka proceeds to the next step. 3. Deny ACL: If there is a matching Deny ACL, access is denied (even if an Allow exists). 4. Deny: If no matching ACLs are found, access is denied by default. This order ensures that super users bypass ACLs, denials override allows, and default is deny.

Topics

#ACL permission sequence#super users#deny ACL#allow ACL

Community Discussion

No community discussion yet for this question.

Full CCAAK Practice