CASSANDRA Security 2

Question 1

What CQL command is used to create a new database role in Apache Cassandra?

Accepted Answer

CREATE ROLE analyst

Answer

ADD ROLE analyst

Answer

CREATE USER analyst

Answer

GRANT ROLE analyst

Question 2

Which CQL statement correctly grants SELECT permission on table 'orders' in keyspace 'sales' to role 'analyst'?

Accepted Answer

GRANT SELECT ON TABLE sales.orders TO analyst

Answer

GRANT READ ON TABLE sales.orders TO analyst

Answer

ALLOW SELECT ON sales.orders FOR analyst

Answer

PERMIT SELECT ON TABLE sales.orders TO analyst

Question 3

How do you assign superuser privileges to a role when creating it in Cassandra?

Accepted Answer

CREATE ROLE admin WITH SUPERUSER = true

Answer

CREATE ROLE admin WITH ADMIN = true

Answer

CREATE ROLE admin WITH PRIVILEGE = SUPER

Answer

CREATE ROLE admin WITH ROLE = SUPERUSER

Question 4

What is the recommended strategy for the system_auth keyspace replication in a multi-datacenter production cluster?

Accepted Answer

NetworkTopologyStrategy with RF matching the number of nodes in each DC

Answer

SimpleStrategy with RF=1 (default)

Answer

SimpleStrategy with RF=3 globally

Answer

NetworkTopologyStrategy with RF=1 per DC

Question 5

Which permission keyword in Cassandra grants all available privileges on a given resource?

Accepted Answer

ALL

Answer

ADMIN

Answer

FULL

Answer

ROOT

Question 6

What CQL statement removes SELECT permission on a table from a role in Cassandra?

Accepted Answer

REVOKE SELECT ON TABLE ks.tbl FROM role

Answer

DENY SELECT ON TABLE ks.tbl FROM role

Answer

REMOVE SELECT ON TABLE ks.tbl FROM role

Answer

DELETE SELECT ON TABLE ks.tbl FROM role

Question 7

What CQL command lists all permissions granted to a specific role in Apache Cassandra?

Accepted Answer

LIST PERMISSIONS OF analyst

Answer

SHOW PERMISSIONS OF analyst

Answer

DESCRIBE PERMISSIONS FOR analyst

Answer

SELECT * FROM system_auth.role_permissions WHERE role='analyst'