ElasticSearch Professional Standards & Competencies 2

Question 1

Which Elasticsearch role-based access control (RBAC) privilege allows a user to read index data but not modify mappings?

Accepted Answer

read

Answer

The 'read' privilege grants access to read operations like search and get, without allowing mapping or index configuration changes.

Question 2

When documenting an Elasticsearch cluster architecture for a client handoff, which detail is MOST critical to include?

Accepted Answer

Node roles, shard allocation settings, and ILM policies

Answer

Node roles, shard allocation, and ILM policies are the operational details a successor needs to maintain and troubleshoot the cluster.

Question 3

A colleague proposes storing raw PII in a plaintext Elasticsearch field for easier searching. What is the professionally appropriate response?

Accepted Answer

Recommend field-level encryption or tokenization and document the risk

Answer

Professional standards require advocating for data protection controls such as encryption or tokenization and formally documenting any accepted risks.

Question 4

An Elasticsearch engineer discovers a critical vulnerability in a third-party plugin used in production. What is the FIRST professional step?

Accepted Answer

Assess the severity, notify stakeholders, and follow the organization's vulnerability management process

Answer

Professional practice requires assessing impact, notifying the appropriate stakeholders, and following established vulnerability management procedures.

Question 5

Which Elasticsearch feature should a professional configure to meet a compliance requirement for audit logging of all access attempts?

Accepted Answer

Elasticsearch audit logging via the xpack.security.audit settings

Answer

Elasticsearch's built-in audit logging (enabled via xpack.security.audit) records authentication attempts, authorization decisions, and data access events.

ElasticSearch Practice Test

ElasticSearch Practice Test

ElasticSearch Professional Standards & Competencies 2