CASSANDRA Security

Question 1

Which authenticator is enabled by default in Apache Cassandra and allows all client connections without requiring credentials?

Accepted Answer

AllowAllAuthenticator

Answer

AllowAllAuthenticator is the default authenticator in Cassandra, permitting all connections without credential checks, which is suitable only for development environments.

Question 2

Which authenticator must be configured in cassandra.yaml to require clients to provide a username and password?

Accepted Answer

PasswordAuthenticator

Answer

PasswordAuthenticator stores credentials in the system_auth keyspace and requires clients to supply a username and password during connection.

Question 3

What are the default superuser credentials in a freshly installed Apache Cassandra cluster?

Accepted Answer

cassandra / cassandra

Answer

Cassandra ships with a default superuser account where both the username and password are 'cassandra', which must be changed immediately in production.

Question 4

In which keyspace does PasswordAuthenticator store user roles and credentials in Apache Cassandra?

Accepted Answer

system_auth

Answer

PasswordAuthenticator persists role and credential data in the system_auth keyspace, which is why its replication factor matters for authentication availability.

Question 5

Which authorizer must be set in cassandra.yaml to enable GRANT and REVOKE permission management?

Accepted Answer

CassandraAuthorizer

Answer

CassandraAuthorizer stores and enforces permission grants in the system_auth keyspace, enabling fine-grained access control via GRANT and REVOKE statements.

CASSANDRA - Apache Cassandra Database Practice Test

CASSANDRA - Apache Cassandra Database Practice Test

CASSANDRA Security