This set of Hadoop Multiple Choice Questions & Answers (MCQs) focuses on “Security”.
1. For running hadoop service daemons in Hadoop in secure mode, ___________ principals are required.
a) SSL
b) Kerberos
c) SSH
d) None of the mentioned
View Answer
Explanation: Each service reads authenticate information saved in keytab file with appropriate permission.
2. Point out the correct statement :
a) Hadoop does have the definition of group by itself
b) MapReduce JobHistory server run as same user such as mapred
c) SSO environment is managed using Kerberos with LDAP for Hadoop in secure mode
d) None of the mentioned
View Answer
Explanation: You can change a way of mapping by specifying the name of mapping provider as a value of hadoop.security.group.mapping.
3. The simplest way to do authentication is using _________ command of Kerberos.
a) auth
b) kinit
c) authorize
d) all of the mentioned
View Answer
Explanation: HTTP web-consoles should be served by principal different from RPC’s one.
4. Data transfer between Web-console and clients are protected by using :
a) SSL
b) Kerberos
c) SSH
d) None of the mentioned
View Answer
Explanation: AES offers the greatest cryptographic strength and the best performance.
5. Point out the wrong statement :
a) Data transfer protocol of DataNode does not use the RPC framework of Hadoop
b) Apache Oozie which access the services of Hadoop on behalf of end users need to be able to impersonate end users
c) DataNode must authenticate itself by using privileged ports which are specified by dfs.datanode.address and dfs.datanode.http.address
d) None of the mentioned
View Answer
Explanation: Authentication is based on the assumption that the attacker won’t be able to get root privileges.
6. In order to turn on RPC authentication in hadoop, set the value of hadoop.security.authentication property to :
a) zero
b) kerberos
c) false
d) none of the mentioned
View Answer
Explanation: Security settings need to be modified properly for robustness.
7. The __________ provides a proxy between the web applications exported by an application and an end user.
a) ProxyServer
b) WebAppProxy
c) WebProxy
d) None of the mentioned
View Answer
Explanation: If security is enabled it will warn users before accessing a potentially unsafe web application. Authentication and authorization using the proxy is handled just like any other privileged web application.
8. ___________ used by YARN framework which define how any container launched and controlled.
a) Container
b) ContainerExecutor
c) Executor
d) All of the mentioned
View Answer
Explanation: The container process has the same Unix user as the NodeManager.
9. The ____________ requires that paths including and leading up to the directories specified in yarn.nodemanager.local-dirs
a) TaskController
b) LinuxTaskController
c) LinuxController
d) None of the mentioned
View Answer
Explanation: LinuxTaskController keeps track of all paths and directories on datanode.
10. The configuration file must be owned by the user running :
a) DataManager
b) NodeManager
c) ValidationManager
d) None of the mentioned
View Answer
Explanation: To recap, local file-system permissions need to be modified.
Sanfoundry Global Education & Learning Series – Hadoop.
Here’s the list of Best Reference Books in Hadoop.
