Encryption at rest in Kafka - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable encryption at rest by specifying the correct configuration property.

Kafka

props.put("[1]", "true");

Drag options to blanks, or click blank then click option'

Aencryption.at.rest

Bencryption.enabled

Cencryption.at.rest.enable

Dencryption.at.rest.enabled

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect property names that do not exist in Kafka configuration.

Confusing encryption at rest with encryption in transit properties.

The correct Kafka configuration property to enable encryption at rest is encryption.at.rest.enabled.

2fill in blank

medium

Complete the code to specify the encryption key location for Kafka's encryption at rest.

Kafka

props.put("encryption.key.location", "[1]");

Drag options to blanks, or click blank then click option'

A/etc/kafka/keys/keyfile

Bkafka.key

C/var/lib/kafka/key

Dkeyfile.txt

Attempts:

3 left

💡 Hint

Common Mistakes

Using relative paths or just filenames without full path.

Using incorrect or non-existent paths.

The encryption key location should be a full path to the key file, such as /etc/kafka/keys/keyfile.

3fill in blank

hard

Fix the error in the code to correctly configure Kafka to use AES encryption algorithm for encryption at rest.

Kafka

props.put("encryption.algorithm", "[1]");

Drag options to blanks, or click blank then click option'

ARSA

BAES

CSHA256

DDES

Attempts:

3 left

💡 Hint

Common Mistakes

Using hashing algorithms like SHA256 instead of encryption algorithms.

Using asymmetric algorithms like RSA for encryption at rest.

The correct algorithm for encryption at rest in Kafka is AES, which is a symmetric encryption algorithm.

4fill in blank

hard

Fill both blanks to configure Kafka to rotate encryption keys every 30 days and set the key rotation policy.

Kafka

props.put("encryption.key.rotation.interval.days", "[1]");
props.put("encryption.key.rotation.policy", "[2]");

Drag options to blanks, or click blank then click option'

A30

B60

Cautomatic

Dmanual

Attempts:

3 left

💡 Hint

Common Mistakes

Setting the interval to 60 days instead of 30.

Using 'manual' instead of 'automatic' for key rotation policy.

Setting the rotation interval to 30 days and the policy to automatic enables Kafka to rotate keys every 30 days automatically.

5fill in blank

hard

Fill all three blanks to create a secure Kafka configuration for encryption at rest with key location, algorithm, and enabling encryption.

Kafka

props.put("encryption.key.location", "[1]");
props.put("encryption.algorithm", "[2]");
props.put("encryption.at.rest.enabled", "[3]");

Drag options to blanks, or click blank then click option'

A/etc/kafka/secure/keyfile

BAES

Ctrue

Dfalse

Attempts:

3 left

💡 Hint

Common Mistakes

Using relative or insecure paths for the key location.

Choosing incorrect encryption algorithms.

Forgetting to enable encryption by setting the property to 'true'.

This configuration sets the key location to a secure path, uses AES encryption, and enables encryption at rest.