SAP-C02 · Question #869
A company is creating a data analytics platform on AWS. The company wants to deploy Apache Kafka as part of the solution. The company must ensure that all Kafka clients are authenticated to a Kafka…
The correct answer is B. Enable AWS Private CA. Deploy an Amazon Managed Streaming for Apache Kafka (Amazon. Amazon MSK natively supports TLS mutual authentication with certificates issued by AWS Private CA. Using Private CA minimizes operational overhead by providing a managed private PKI to issue and manage client certificates, while MSK integrates directly with it for client auth…
Question
A company is creating a data analytics platform on AWS. The company wants to deploy Apache Kafka as part of the solution. The company must ensure that all Kafka clients are authenticated to a Kafka cluster by using mutual TLS. Which solution will meet these requirements with LEAST operational overhead?
Options
- ACreate a new certificate in AWS Certificate Manager (ACM) for the aws.kafka.internal domain.
- BEnable AWS Private CA. Deploy an Amazon Managed Streaming for Apache Kafka (Amazon
- CCreate a new self-signed certificate. Load the certificate as a server certificate into IAM. Deploy an
- DDeploy an Amazon EKS cluster. Configure the cert-manager Amazon EKS add-on. Deploy Kafka
How the community answered
(48 responses)- A4% (2)
- B73% (35)
- C6% (3)
- D17% (8)
Explanation
Amazon MSK natively supports TLS mutual authentication with certificates issued by AWS Private CA. Using Private CA minimizes operational overhead by providing a managed private PKI to issue and manage client certificates, while MSK integrates directly with it for client auth and broker encryption.
Community Discussion
No community discussion yet for this question.