Describe Security Considerations with Hadoop and the Cloud DATA-ENGINEERING-OPTIMIZE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company must process financial data in a cloud Hadoop cluster. The data is subject to PCI DSS, which requires encryption of cardholder data at rest and in transit. The company also needs to ensure that only authorized personnel can access the data. Which approach should they take?

   • AEnable HDFS encryption zones for the data, use TLS for all data transfers, and configure Apache Ranger policies for access control.
   • BUse HDFS permissions to restrict access and rely on the cloud provider's default encryption.
   • CUse Kerberos for authentication and network security groups to restrict access.
   • DEncrypt data at rest using cloud KMS and use a VPN for all data transfers.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of audit logging in a Hadoop cluster?

   • ATo improve cluster performance
   • BTo manage user authentication
   • CTo record who accessed what data and when
   • DTo encrypt data at rest
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a Hadoop cluster, which component is responsible for authenticating users and services using tickets and encrypted communication?

   • AApache Ranger
   • BHDFS NameNode
   • CKerberos
   • DApache Atlas
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is using a cloud Hadoop service where the provider manages the infrastructure and the Hadoop software. The company wants to ensure that their data is encrypted at rest and that they control the encryption keys. Which responsibility falls on the company?

   • ASecuring the physical data center and the network infrastructure.
   • BManaging the encryption keys using a cloud KMS that they control.
   • CPatching the Hadoop software and the underlying operating system.
   • DConfiguring the firewall rules for the Hadoop cluster.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has a multi-tenant Hadoop cluster where different departments need isolated access to their own data. They also need to ensure that authentication is centralized and secure. Which approach should they use?

   • ACreate separate HDFS directories for each department and use HDFS permissions to restrict access.
   • BUse a shared service account for all departments and rely on the cloud provider's IAM.
   • CUse Kerberos for authentication and Apache Ranger for fine-grained authorization per department.
   • DUse network segmentation to isolate each department's traffic and rely on that for security.
   Reveal Solution Discussion Select an answer first