CASSANDRA Security 2

Question 1

What CQL command is used to create a new database role in Apache Cassandra?

Accepted Answer

CREATE ROLE analyst

Answer

CREATE ROLE is the modern CQL command for creating both login users and non-login roles; CREATE USER is a legacy alias kept for backward compatibility.

Question 2

Which CQL statement correctly grants SELECT permission on table 'orders' in keyspace 'sales' to role 'analyst'?

Accepted Answer

GRANT SELECT ON TABLE sales.orders TO analyst

Answer

The correct syntax is GRANT ON TO , using standard SQL-style permission names like SELECT, MODIFY, and ALTER.

Question 3

How do you assign superuser privileges to a role when creating it in Cassandra?

Accepted Answer

CREATE ROLE admin WITH SUPERUSER = true

Answer

The SUPERUSER = true option in CREATE ROLE or ALTER ROLE grants full administrative access, allowing the role to manage all other roles and permissions.

Question 4

What is the recommended strategy for the system_auth keyspace replication in a multi-datacenter production cluster?

Accepted Answer

NetworkTopologyStrategy with RF matching the number of nodes in each DC

Answer

Using NetworkTopologyStrategy with a replication factor matching each datacenter's node count ensures authentication data is available even during node failures across all DCs.

Question 5

Which permission keyword in Cassandra grants all available privileges on a given resource?

Accepted Answer

ALL

Answer

GRANT ALL ON TO grants every applicable permission (SELECT, MODIFY, ALTER, DROP, AUTHORIZE, DESCRIBE) on the specified resource.

CASSANDRA - Apache Cassandra Database Practice Test

CASSANDRA - Apache Cassandra Database Practice Test

CASSANDRA Security 2