Apache Kafka Kafka Security & Configuration

Question 1

Which protocol is used for encrypting data in transit between Kafka clients and brokers?

Accepted Answer

TLS (Transport Layer Security)

Answer

SSL v3

Answer

IPSec

Answer

SASL/GSSAPI alone

Question 2

What does SASL/PLAIN authentication in Kafka use for credentials?

Accepted Answer

Username and password sent over the wire (should be used with TLS)

Answer

Kerberos tickets

Answer

OAuth tokens

Answer

Client X.509 certificates

Question 3

What Kafka configuration property specifies the security protocol for a listener?

Accepted Answer

listener.security.protocol.map

Answer

security.inter.broker.protocol

Answer

ssl.keystore.location

Answer

sasl.mechanism

Question 4

What is the purpose of ACLs in Kafka?

Accepted Answer

Define which principals (users/clients) are authorized to perform specific operations on resources

Answer

Encrypt messages at rest

Answer

Manage SSL certificate rotation

Answer

Configure network firewall rules

Question 5

Which CLI tool is used to manage Kafka ACLs?

Accepted Answer

kafka-acls.sh

Answer

kafka-configs.sh

Answer

kafka-topics.sh

Answer

kafka-security-manager.sh

Question 6

What does SASL/OAUTHBEARER allow in Kafka authentication?

Accepted Answer

Clients authenticate using OAuth 2.0 bearer tokens obtained from an external authorization server

Answer

Clients use Kerberos tickets from an Active Directory

Answer

Clients authenticate with username/password stored in ZooKeeper

Answer

Clients use mutual TLS certificates