nerdexam
Confluent

CCAAK · Question #98

You use Kafka deployed on-premises to keep track of inventory and item availability. Since Kafka is running on-premises and is in a private network, data is transmitted in plain text and data is not…

The correct answer is B. Configure Kafka with SSL for in-flight encryption and leverage the cloud provider's volume. In a public cloud environment, Kafka must protect data both in transit and at rest. Enabling SSL provides encryption for all network communication, while using the cloud provider's native disk or volume encryption ensures stored log segments are encrypted without requiring…

Apache Kafka Security

Question

You use Kafka deployed on-premises to keep track of inventory and item availability. Since Kafka is running on-premises and is in a private network, data is transmitted in plain text and data is not encrypted at rest. You need to migrate all of the on-premises infrastructure to a public cloud to minimize infrastructure costs and improve operational efficiency. Moving Kafka to a public cloud creates a renewed focus on improving security. You need to determine which additional measures need be taken to improve Kafka security. What should you do?

Options

  • ANo changes to Kafka are needed since Kafka will automatically leverage the public cloud
  • BConfigure Kafka with SSL for in-flight encryption and leverage the cloud provider's volume
  • CSince there will be no internet access to your company's VPC on the public cloud, it is considered
  • DKeep the current plaintext listener enabled and shift all traffic to the TLS listener. Enable the cloud

How the community answered

(17 responses)
  • A
    12% (2)
  • B
    76% (13)
  • C
    6% (1)
  • D
    6% (1)

Explanation

In a public cloud environment, Kafka must protect data both in transit and at rest. Enabling SSL provides encryption for all network communication, while using the cloud provider's native disk or volume encryption ensures stored log segments are encrypted without requiring changes to Kafka's internal storage format.

Topics

#cloud migration#SSL encryption#encryption at rest#security hardening

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CCAAK Practice