Hadoop - Security
Why does HDFS encryption at rest use a two-tier key system involving Data Encryption Keys (DEKs) and Key Encryption Keys (KEKs)?
Why does HDFS encryption at rest use a two-tier key system involving Data Encryption Keys (DEKs) and Key Encryption Keys (KEKs)?
hard📝 Conceptual Q10 of 15
Step-by-Step Solution
Solution:
Step 1: Understand DEKs and KEKs roles
DEKs encrypt data blocks; KEKs encrypt DEKs for secure storage.Step 2: Reason why two-tier system is used
This separation enhances security by protecting DEKs with KEKs managed in KMS.Final Answer:
To improve security by encrypting DEKs with KEKs stored in KMS -> Option BQuick Check:
Two-tier keys = better security [OK]
Quick Trick: KEKs protect DEKs, enhancing encryption security [OK]
Common Mistakes:
- Thinking two keys speed up processing
- Believing users pick keys per file
- Assuming keys are stored on DataNodes
Master "Security" in Hadoop
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Hadoop Quizzes