HDFS encryption at rest in Hadoop - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is the primary purpose of HDFS encryption at rest?

HDFS encryption at rest is used to protect data stored in Hadoop Distributed File System. What is its main goal?

A To enable faster network transfer of data blocks

B To speed up data processing in Hadoop clusters

C To compress data files for storage efficiency

D To secure data stored on disk from unauthorized access

💡 Hint

Think about what 'encryption at rest' means in data security.

Encryption at rest means encrypting data when it is stored on disk, so unauthorized users cannot read it even if they access the storage directly.

🧠 Conceptual

intermediate

Which component manages encryption keys for HDFS encryption at rest?

In HDFS encryption at rest, which system is responsible for managing the encryption keys?

A Key Management Server (KMS)

B ResourceManager

C DataNode

D NameNode

💡 Hint

Think about a service dedicated to handling keys securely.

The Key Management Server (KMS) manages encryption keys securely and provides them to HDFS when needed.

❓ data_output

advanced

What is the output of the command to list encryption zones in HDFS?

Given the command hdfs crypto -listZones, what output will it produce if there are two encryption zones named /zone1 and /zone2?

Hadoop

hdfs crypto -listZones

A

Encryption zones:
/zone1
/zone2

B

/zone1
/zone2

C No encryption zones found

D /zone1, /zone2

💡 Hint

Check the typical output format of hdfs crypto -listZones.

The command lists encryption zones with a header line 'Encryption zones:' followed by each zone on a new line.

🔧 Debug

advanced

Why does this HDFS encryption command fail with 'Key not found' error?

Consider the command hdfs crypto -createZone -keyName myKey -path /secure_data fails with error 'Key not found'. What is the most likely cause?

A The path '/secure_data' is not a directory

B The encryption key 'myKey' does not exist in the KMS

C The user does not have permission to create encryption zones

D The HDFS service is not running

💡 Hint

Focus on the error message about the key.

The error 'Key not found' means the specified key 'myKey' is not registered in the Key Management Server (KMS).

🚀 Application

expert

How to verify if a file is stored in an HDFS encryption zone?

You want to check if the file /secure_data/file1.txt is encrypted by HDFS encryption at rest. Which command will give you this information?

A hdfs crypto -listZones | grep /secure_data

B hdfs fsck /secure_data/file1.txt -files -blocks -locations

C hdfs crypto -getZoneForPath /secure_data/file1.txt

D hdfs crypto -listPathsInZone /secure_data

💡 Hint

Look for a command that returns the encryption zone for a specific path.

The command hdfs crypto -getZoneForPath returns the encryption zone for the given file path, confirming if it is encrypted.