Apache Kafka Kafka Security & Configuration

Question 1

Which protocol is used for encrypting data in transit between Kafka clients and brokers?

Accepted Answer

TLS (Transport Layer Security)

Answer

TLS (formerly SSL) encrypts the network traffic between Kafka clients and brokers, preventing eavesdropping and man-in-the-middle attacks.

Question 2

What does SASL/PLAIN authentication in Kafka use for credentials?

Accepted Answer

Username and password sent over the wire (should be used with TLS)

Answer

SASL/PLAIN authenticates clients using a username and password; it transmits credentials in cleartext, so it must be combined with TLS for security.

Question 3

What Kafka configuration property specifies the security protocol for a listener?

Accepted Answer

listener.security.protocol.map

Answer

listener.security.protocol.map maps each named listener to its security protocol (PLAINTEXT, SSL, SASL_PLAINTEXT, or SASL_SSL).

Question 4

What is the purpose of ACLs in Kafka?

Accepted Answer

Define which principals (users/clients) are authorized to perform specific operations on resources

Answer

Kafka ACLs (Access Control Lists) specify which operations (Read, Write, Create, etc.) a given principal is allowed or denied on topics, consumer groups, and other resources.

Question 5

Which CLI tool is used to manage Kafka ACLs?

Accepted Answer

kafka-acls.sh

Answer

kafka-acls.sh is the built-in tool for adding, listing, and removing ACL entries in a Kafka cluster.

Apache Kafka Practice Test

Apache Kafka Practice Test

Apache Kafka Kafka Security & Configuration