Why Hadoop security protects sensitive data - Test Your Understanding

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the Hadoop configuration property for enabling security.

Hadoop

conf.set("hadoop.security.authentication", "[1]")

Drag options to blanks, or click blank then click option'

Akerberos

Bnone

Csimple

Danonymous

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'simple' disables security, which is not recommended for sensitive data.

Setting hadoop.security.authentication to kerberos enables secure authentication in Hadoop.

2fill in blank

medium

Complete the code to set the Hadoop property that enables data encryption at rest.

Hadoop

conf.setBoolean("[1]", true)

Drag options to blanks, or click blank then click option'

Adfs.encrypt.data.at.rest

Bdfs.encrypt.data.at.rest.enabled

Cdfs.encryption.enabled

Ddfs.encrypt.data.transfer

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing encryption at rest with encryption during data transfer.

The property dfs.encrypt.data.at.rest.enabled enables encryption of data stored in HDFS, protecting sensitive data at rest.

3fill in blank

hard

Fix the error in the code that sets the Hadoop property for enabling audit logging.

Hadoop

conf.set("hadoop.security.audit.logger", "[1]")

Drag options to blanks, or click blank then click option'

Aorg.apache.hadoop.security.audit.AuditLoggerImpl.class

Borg.apache.hadoop.security.audit.AuditLogger

Corg.apache.hadoop.security.audit.AuditLoggerImpl$

Dorg.apache.hadoop.security.audit.AuditLoggerImpl

Attempts:

3 left

💡 Hint

Common Mistakes

Adding '.class' or '$' suffix causes runtime errors.

The correct class for audit logging is org.apache.hadoop.security.audit.AuditLoggerImpl, which enables audit logs to track access to sensitive data.

4fill in blank

hard

Fill both blanks to create a dictionary comprehension that maps user names to their encrypted home directories if their name length is greater than 4.

Hadoop

{user: home_dir[1] for user, home_dir in user_dirs.items() if len(user) [2] 4}

Drag options to blanks, or click blank then click option'

A.encrypt()

B.decrypt()

C>

D<

Attempts:

3 left

💡 Hint

Common Mistakes

Using '.decrypt()' instead of '.encrypt()' or wrong comparison operator.

This comprehension encrypts home directories for users whose names are longer than 4 characters, protecting sensitive data.

5fill in blank

hard

Fill all three blanks to create a dictionary that stores file names as keys in uppercase, their sizes as values, but only for files larger than 1000 bytes.

Hadoop

{ [1]: [2] for [3], size in files.items() if size > 1000 }

Drag options to blanks, or click blank then click option'

Afilename.upper()

Bsize

Cfilename

Dfile

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong variable names or not converting keys to uppercase.

This dictionary comprehension creates keys as uppercase file names and values as their sizes, filtering files larger than 1000 bytes to protect important data.

Practice

1. Why is Hadoop security important for sensitive data?

easy

A. It controls who can access and change the data

B. It speeds up data processing

C. It reduces data storage size

D. It improves data visualization

Solution

1. Step 1: Understand the purpose of Hadoop security

   Hadoop security is designed to protect data by controlling access and modifications.

2. Step 2: Identify the main goal related to sensitive data

   The main goal is to keep sensitive data private and safe from unauthorized users.

3. Final Answer:

   It controls who can access and change the data -> Option A

4. Quick Check:

   Security protects data access = D [OK]

Hint: Security means controlling access to data [OK]

Common Mistakes:

• Confusing security with speed or storage
• Thinking security improves visualization
• Ignoring access control importance

2. Which Hadoop security feature verifies the identity of a user?

easy

A. Authentication

B. Encryption

C. Authorization

D. Data replication

Solution

1. Step 1: Define authentication in Hadoop security

   Authentication is the process of verifying who a user is before allowing access.

2. Step 2: Differentiate from other features

   Encryption protects data content, authorization controls permissions, and replication copies data.

3. Final Answer:

   Authentication -> Option A

4. Quick Check:

   User identity check = Authentication = B [OK]

Hint: Authentication means verifying user identity [OK]

Common Mistakes:

• Mixing authentication with authorization
• Confusing encryption with identity check
• Thinking replication is a security feature

3. Given this Hadoop security setting snippet, what is the effect?

hadoop.security.authorization=true
hadoop.security.authentication=simple

medium

A. Users are not checked before accessing data

B. Data is encrypted automatically

C. Data replication is disabled

D. Users must be authenticated and authorized to access data

Solution

1. Step 1: Analyze the setting hadoop.security.authorization=true

   This means Hadoop checks if users have permission to access resources.

2. Step 2: Analyze the setting hadoop.security.authentication=simple

   This means users are identified with a simple authentication method before access.

3. Final Answer:

   Users must be authenticated and authorized to access data -> Option D

4. Quick Check:

   Authentication + Authorization enabled = C [OK]

Hint: True authorization means permission checks happen [OK]

Common Mistakes:

• Assuming no authentication with 'simple'
• Thinking encryption is automatic here
• Ignoring authorization setting

4. This Hadoop security config has an error. What is it?

hadoop.security.authentication = none
hadoop.security.authorization = true

medium

A. Authorization cannot be true without authentication

B. The syntax uses spaces around '=' which is invalid

C. Authentication set to 'none' disables user verification

D. Encryption is missing

Solution

1. Step 1: Check syntax for Hadoop config

   Hadoop config files do not allow spaces around '='; it causes parsing errors.

2. Step 2: Verify other options

   Authentication 'none' disables verification but is valid syntax; authorization can be true independently; encryption is optional.

3. Final Answer:

   The syntax uses spaces around '=' which is invalid -> Option B

4. Quick Check:

   Spaces around '=' cause syntax error = A [OK]

Hint: No spaces around '=' in config files [OK]

Common Mistakes:

• Thinking 'none' is invalid authentication
• Assuming authorization depends on authentication
• Confusing encryption with syntax errors

5. You want to protect sensitive data in Hadoop from unauthorized access and ensure data privacy. Which combination of security features should you enable?

hard

A. Simple authentication only

B. Data replication and compression

C. Authentication, Authorization, and Encryption

D. Authorization and data backup

Solution

1. Step 1: Identify features that protect data privacy and access

   Authentication verifies user identity, authorization controls permissions, and encryption protects data content.

2. Step 2: Evaluate other options

   Data replication and compression do not secure data; simple authentication alone is weak; backup helps recovery but not access control.

3. Final Answer:

   Authentication, Authorization, and Encryption -> Option C

4. Quick Check:

   All three combined secure data best = A [OK]

Hint: Use all three: authenticate, authorize, encrypt [OK]

Common Mistakes:

• Ignoring encryption importance
• Relying on backup for security
• Using only simple authentication