Describe Security Considerations with Hadoop and the Cloud DATA-ENGINEERING-OPTIMIZE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to allow a third-party vendor to run analytics on a subset of data in their cloud Hadoop cluster. The vendor should not have access to other data, and all their actions should be logged. Which approach should they use?

   • AUse network security groups to allow the vendor's IP addresses and rely on those logs.
   • BGive the vendor the same IAM role as internal data scientists.
   • CCreate a shared service account for the vendor and rely on the cloud provider's monitoring.
   • DCreate a separate IAM role for the vendor with policies that grant access only to the specific data, and enable audit logging for that role.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is typically the responsibility of the cloud provider in a Hadoop deployment on IaaS?

   • AConfiguring HDFS encryption zones
   • BManaging the Hadoop cluster's OS patches
   • CCreating IAM roles for Hadoop services
   • DSecuring the physical servers and network
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is migrating its Hadoop cluster to a cloud provider. They want to ensure that the cloud provider is responsible for securing the physical data centers and the underlying network, while the company retains control over access to the cluster and data. Which aspect of the shared responsibility model should the company focus on?

   • AEnsuring the cloud provider patches the hypervisor and physical network devices.
   • BRequesting that the provider manage the Hadoop cluster's operating system patches.
   • CVerifying that the cloud provider has redundant power and cooling in its data centers.
   • DConfiguring IAM roles and policies to control access to the Hadoop services and data.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company has a Hadoop cluster with sensitive data. They need to ensure that only users with a 'data_scientist' role can read the data, and all read attempts must be logged. They also want to encrypt the data at rest. Which combination of features should they implement?

   • AUse Kerberos to authenticate users and rely on the operating system's file permissions.
   • BUse Apache Ranger to create a policy that grants read access to the 'data_scientist' role and enables auditing, and enable HDFS encryption zones for the data directory.
   • CEncrypt the data at rest using HDFS encryption zones and use network security groups to restrict access.
   • DUse HDFS permissions to set the directory to be readable only by the 'data_scientist' group and enable HDFS audit logging.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of using TLS/SSL in a Hadoop cluster?

   • ATo manage encryption keys for HDFS
   • BTo authenticate users to the cluster
   • CTo encrypt data stored in HDFS
   • DTo encrypt data transmitted between clients and the cluster
   Reveal Solution Discussion Select an answer first