Security is a critical aspect of any distributed system, and Apache Kafka offers robust support for securing data in transit and at rest. Kafka supports encryption (SSL/TLS), authentication (SASL mechanisms like PLAIN, SCRAM, GSSAPI, and OAUTHBEARER), and authorization (ACLs). Understanding Kafka’s security model is essential for configuring secure clusters and preventing unauthorized access.
These MCQs will help developers and administrators prepare for interviews and secure production Kafka environments effectively, from basic security concepts to advanced configurations.
1.) Which of the following is used to encrypt Kafka data in transit?
2.) What is the role of SASL in Kafka?
3.) Which SASL mechanism in Kafka supports Kerberos-based authentication?
4.) What is the use of Kafka ACLs?
5.) Which configuration enables SSL in Kafka broker?
6.) Which property is required in Kafka clients for SASL authentication?
7.) What command is used to configure ACLs in Kafka?
8.) What Kafka component must be secured to protect metadata access?
9.) Which protocol allows user token-based authentication in Kafka?
10.) What is the default security protocol in Kafka if none is specified?