Wire encryption for data in transit in Hadoop - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable wire encryption in Hadoop configuration.

Hadoop

conf.set("[1]", "true")

Drag options to blanks, or click blank then click option'

Adfs.encrypt.data.transfer

Bdfs.data.transfer.protection

Cdfs.encrypt.wire

Ddfs.data.encryption.enabled

Attempts:

3 left

💡 Hint

Common Mistakes

Using a property that controls data protection but not encryption.

Confusing encryption with general data security settings.

The property dfs.encrypt.data.transfer enables wire encryption for data in transit in Hadoop.

2fill in blank

medium

Complete the code to set the encryption cipher suite for Hadoop wire encryption.

Hadoop

conf.set("dfs.encrypt.data.transfer.cipher.suites", "[1]")

Drag options to blanks, or click blank then click option'

ARSA/ECB/PKCS1Padding

BAES/CTR/NoPadding

CDES/CBC/PKCS5Padding

DBlowfish/CFB/NoPadding

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing RSA which is asymmetric and not used for bulk data encryption.

Selecting DES which is outdated and insecure.

The recommended cipher suite for Hadoop wire encryption is AES/CTR/NoPadding for performance and security.

3fill in blank

hard

Fix the error in the code to correctly enable data transfer encryption in Hadoop.

Hadoop

conf.setBoolean("[1]", true)

Drag options to blanks, or click blank then click option'

Adfs.encrypt.data.transfer

Bdfs.data.transfer.protection

Cdfs.encrypt.wire

Ddfs.data.encryption.enabled

Attempts:

3 left

💡 Hint

Common Mistakes

Using a property that controls data protection but not encryption.

Using a property that does not exist in Hadoop configuration.

The correct property to enable encryption is dfs.encrypt.data.transfer. Using other properties will not enable wire encryption.

4fill in blank

hard

Fill both blanks to create a dictionary of encryption settings for Hadoop wire encryption.

Hadoop

encryption_settings = {"[1]": "true", "[2]": "AES/CTR/NoPadding"}

Drag options to blanks, or click blank then click option'

Adfs.encrypt.data.transfer

Bdfs.data.transfer.protection

Cdfs.encrypt.data.transfer.cipher.suites

Ddfs.data.encryption.enabled

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up the keys for enabling encryption and setting cipher suite.

Using keys that do not exist in Hadoop configuration.

The dictionary keys must be dfs.encrypt.data.transfer to enable encryption and dfs.encrypt.data.transfer.cipher.suites to specify the cipher.

5fill in blank

hard

Fill all three blanks to create a Hadoop configuration snippet that enables wire encryption, sets the cipher, and enables data transfer protection.

Hadoop

conf.setBoolean("[1]", true)
conf.set("[2]", "AES/CTR/NoPadding")
conf.set("[3]", "privacy")

Drag options to blanks, or click blank then click option'

Adfs.encrypt.data.transfer

Bdfs.encrypt.data.transfer.cipher.suites

Cdfs.data.transfer.protection

Ddfs.data.encryption.enabled

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing the properties for encryption and protection.

Using incorrect property names or wrong data types.

This snippet enables wire encryption (dfs.encrypt.data.transfer), sets the cipher suite (dfs.encrypt.data.transfer.cipher.suites), and enables data transfer protection (dfs.data.transfer.protection).

Practice

1. What is the main purpose of wire encryption in Hadoop data transfer?

easy

A. To compress data for faster transfer

B. To store data permanently on disk

C. To protect data while it moves between computers

D. To backup data automatically

Solution

1. Step 1: Understand wire encryption concept

   Wire encryption protects data during transfer to prevent unauthorized access.

2. Step 2: Identify the purpose in Hadoop context

   In Hadoop, wire encryption secures data moving between nodes, not compression or storage.

3. Final Answer:

   To protect data while it moves between computers -> Option C

4. Quick Check:

   Wire encryption = Data protection in transit [OK]

Hint: Wire encryption means data safety during transfer [OK]

Common Mistakes:

• Confusing encryption with compression
• Thinking encryption stores data
• Mixing encryption with backup

2. Which Hadoop configuration property enables wire encryption for data transfer?

easy

A. dfs.transfer.encryption.active

B. dfs.data.transfer.protection

C. dfs.secure.transfer.enable

D. dfs.encrypt.data.transfer

Solution

1. Step 1: Recall Hadoop encryption setting

   The correct property to enable wire encryption is dfs.encrypt.data.transfer.

2. Step 2: Compare options with known property

   Only dfs.encrypt.data.transfer matches the exact property name used in Hadoop configuration.

3. Final Answer:

   dfs.encrypt.data.transfer -> Option D

4. Quick Check:

   Encryption property = dfs.encrypt.data.transfer [OK]

Hint: Look for 'encrypt' and 'data.transfer' in property name [OK]

Common Mistakes:

• Choosing similar but incorrect property names
• Confusing encryption with security enable flags
• Using properties that do not exist

3. Given this Hadoop configuration snippet:

{
  "dfs.encrypt.data.transfer": true
}

What will happen when data is transferred between nodes?

medium

A. Data will be encrypted during transfer

B. Data will be transferred without encryption

C. Data transfer will fail due to missing keys

D. Data will be compressed but not encrypted

Solution

1. Step 1: Analyze the configuration setting

   The property dfs.encrypt.data.transfer is set to true, enabling encryption.

2. Step 2: Understand effect on data transfer

   With encryption enabled, data sent between nodes will be encrypted to secure it.

3. Final Answer:

   Data will be encrypted during transfer -> Option A

4. Quick Check:

   True setting means encryption active [OK]

Hint: True means encryption is ON for data transfer [OK]

Common Mistakes:

• Assuming encryption is off despite true value
• Confusing encryption with compression
• Thinking transfer fails without explicit keys here

4. You set dfs.encrypt.data.transfer to true but data is still sent unencrypted. What is a likely cause?

medium

A. SSL certificates and keys are not configured properly

B. The property name is misspelled in configuration

C. Data nodes are offline

D. Encryption only works for HDFS writes, not reads

Solution

1. Step 1: Check configuration completeness

   Enabling encryption requires SSL certificates and keys to manage encryption securely.

2. Step 2: Identify cause of unencrypted transfer

   If certificates or keys are missing or misconfigured, encryption will not activate despite the property.

3. Final Answer:

   SSL certificates and keys are not configured properly -> Option A

4. Quick Check:

   Missing SSL setup disables encryption [OK]

Hint: Encryption needs SSL certs and keys set up [OK]

Common Mistakes:

• Ignoring SSL setup after enabling property
• Assuming misspelling is the cause without checking logs
• Thinking encryption only applies to writes

5. You want to ensure all Hadoop data transfers are encrypted and secure. Which combination is best practice?

hard

A. Only configure SSL certificates without enabling encryption property

B. Set dfs.encrypt.data.transfer to true and configure SSL certificates and keys

C. Set dfs.encrypt.data.transfer to false and use firewall rules

D. Use compression settings to secure data transfer

Solution

1. Step 1: Identify required settings for encryption

   Enabling dfs.encrypt.data.transfer activates wire encryption in Hadoop.

2. Step 2: Recognize the role of SSL certificates and keys

   SSL certificates and keys are needed to manage encryption securely and authenticate nodes.

3. Step 3: Combine both for full encryption

   Only setting the property without SSL or vice versa is incomplete; both are needed for secure transfer.

4. Final Answer:

   Set dfs.encrypt.data.transfer to true and configure SSL certificates and keys -> Option B

5. Quick Check:

   Property true + SSL certs = secure transfer [OK]

Hint: Enable property AND configure SSL for full encryption [OK]

Common Mistakes:

• Relying on firewall instead of encryption
• Skipping SSL setup after enabling encryption
• Confusing compression with encryption