I85PREP
⌘ K
Cloudera CDP-3002 study materials
Cloudera CDP-3002 study resources

Cloudera CDP-3002 practice questions

One question at a time. Build your Cloudera CDP-3002 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloudera Data Platform Administration

In Cloudera Data Platform, which service is the central metadata and governance layer that stores technical metadata and enforces access policies across the platform?

  1. Apache Knox
  2. Apache Atlas Correct answer.
  3. Apache Ozone
  4. Apache Ranger

Explanation

Apache Atlas is the governance and metadata framework in CDP; it maintains the technical metadata catalog, tracks lineage, and works with Ranger to apply classification-based policies. Ranger itself is the policy enforcement engine rather than the metadata store.

Question 2Cloudera Data Platform Administration

Which CDP component provides per-service, role-based authorization policies that are evaluated at query time for Hive, HDFS, and HBase?

  1. Apache Ranger Correct answer.
  2. Apache Atlas
  3. Cloudera Manager
  4. Apache ZooKeeper

Explanation

Apache Ranger is the centralized authorization service in CDP. Administrators define policies per resource in Ranger, and the plugins embedded in each service enforce those policies at access time. Atlas handles metadata and classification, not enforcement.

Question 3Cloudera Data Platform Administration

A cluster administrator wants to add a new DataNode to an existing HDFS service managed by Cloudera Manager. Which action accomplishes this in a CDP deployment?

  1. Edit hdfs-site.xml manually on the new host and restart the NameNode.
  2. Add the host to the cluster in Cloudera Manager and assign the DataNode role, then deploy the client configuration. Correct answer.
  3. Run hdfs dfsadmin -addNode with the new host's IP address.
  4. Create a new HDFS service instance dedicated to the added host.

Explanation

Cloudera Manager manages role placement: you add the host to the cluster, assign the DataNode role to it, and deploy the configuration so the role starts. Manual XML edits bypass management and are overwritten on the next deployment. There is no dfsadmin command that adds a DataNode.

Question 4Cloudera Data Platform Administration

Which CDP runtime component is responsible for scheduling and running YARN applications such as MapReduce and Spark on a cluster?

  1. Ozone Manager
  2. NameNode
  3. ResourceManager Correct answer.
  4. HiveServer2

Explanation

The YARN ResourceManager allocates cluster resources to applications and works with NodeManagers to launch containers. The NameNode handles HDFS namespace metadata, while HiveServer2 serves SQL sessions and Ozone Manager manages object storage.

Question 5Cloudera Data Platform Administration

An administrator needs to protect data at rest in HDFS using transparent encryption. Which CDP feature provides this capability?

  1. TLS certificates on DataNode data transfer ports
  2. Ranger row-filter policies on Hive tables
  3. HDFS Transparent Encryption with key management via a KMS Correct answer.
  4. Kerberos service principals for DataNodes

Explanation

HDFS Transparent Encryption encrypts data at rest using encryption zones whose keys are managed by a Key Management Server. Clients read and write transparently while data on disk remains encrypted. TLS protects data in transit, and Ranger row filters restrict rows rather than encrypting storage.

Question 6Cloudera Data Platform Administration

Which tool in CDP is used to define, schedule, and monitor recurring data pipelines and workflows across Hive, Spark, and other services?

  1. Apache Oozie Correct answer.
  2. Apache Atlas
  3. Apache Ranger
  4. Apache Knox

Explanation

Apache Oozie is the workflow scheduler in CDP for orchestrating recurring jobs such as Hive and Spark actions. It defines workflows and coordinators and tracks their execution status. The other listed services handle gateway security, authorization, and metadata.

Question 7Cloudera Data Platform Administration

A security team wants to audit which users accessed specific HDFS paths. Which CDP capability records these access events for later review?

  1. Ozone replication logs
  2. Ranger audit logs Correct answer.
  3. NameNode edit logs
  4. YARN application logs

Explanation

Ranger plugins emit audit records for each policy evaluation, capturing the user, resource, action, and outcome. These audit logs are the standard source for access reviews. NameNode edit logs record namespace changes, not per-user access decisions.

Question 8Cloudera Data Platform Administration

Which service in CDP provides a single, secure entry point for REST and web UI access to cluster services from outside the cluster?

  1. Apache Atlas
  2. Apache Knox Correct answer.
  3. Apache Ozone
  4. Apache Hive

Explanation

Apache Knox acts as the perimeter security gateway, proxying access to cluster REST APIs and web UIs through a single authenticated endpoint. It integrates with identity providers and applies authentication and URL-based authorization before requests reach backend services.

Question 9Cloudera Data Platform Administration

An administrator must ensure that Hive queries run by analysts cannot read columns tagged as containing personally identifiable information unless the user belongs to a privileged group. Which CDP mechanism enforces this?

  1. HDFS block replication settings
  2. Ranger column-masking and tag-based policies Correct answer.
  3. YARN queue capacity configuration
  4. Ozone bucket versioning

Explanation

Ranger supports tag-based policies that reference Atlas classifications, so columns tagged as PII can be masked or denied for users outside a privileged group. This enforcement happens at query time through the Hive Ranger plugin. Replication and queue settings do not control column-level access.

Question 10Cloudera Data Platform Administration

Which CDP service stores files as objects in buckets and is designed as an alternative to HDFS for large-scale storage?

  1. Apache Impala
  2. Apache Solr
  3. Apache HBase
  4. Apache Ozone Correct answer.

Explanation

Apache Ozone is CDP's scalable distributed object store, organizing data into volumes and buckets while providing an HDFS-compatible file system interface. HBase is a NoSQL table store, Solr is a search platform, and Impala is a query engine.

Question 11Cloudera Data Platform Administration

A cluster uses Kerberos for authentication. Which CDP action is required before a service such as HiveServer2 can authenticate clients using Kerberos?

  1. Add all users to the superuser group in HDFS.
  2. Enable anonymous access in the Knox gateway.
  3. Disable TLS on HiveServer2 to allow Kerberos negotiation.
  4. Create a service principal and keytab for HiveServer2 and configure it to use them. Correct answer.

Explanation

Kerberos-authenticated services need a principal and keytab so the service can prove its identity and validate client tickets. Cloudera Manager typically generates principals and keytabs during Kerberos setup and distributes them to hosts. Disabling TLS or granting superuser status does not establish Kerberos authentication.

Question 12Cloudera Data Platform Administration

Which Cloudera Manager feature lets an administrator apply a configuration change to many hosts at once and then push the change to running roles?

  1. Editing the embedded PostgreSQL database directly
  2. Manual file copy with scp to each host
  3. Restarting the whole cluster with no configuration change
  4. Configuration deployment via the Cloudera Manager API or UI Correct answer.

Explanation

Cloudera Manager stores desired configuration centrally; after editing settings you deploy the client configuration and restart affected roles so changes take effect. Manual copies and direct database edits bypass management and can be overwritten. A full restart without a change accomplishes nothing.

Question 13Cloudera Data Platform Administration

An administrator observes that a YARN application is stuck in ACCEPTED state and never starts running containers. Which resource is most likely exhausted?

  1. The number of Hive metastore tables
  2. The HDFS replication factor
  3. The scheduler queue capacity available to the application Correct answer.
  4. The Ranger audit log retention period

Explanation

An application in ACCEPTED state has been submitted but is waiting for the scheduler to grant resources. If the target queue has no available capacity or the cluster has no free containers, the application remains accepted. HDFS replication, metastore table counts, and audit retention do not gate YARN container allocation.

Question 14Cloudera Data Platform Administration

Which CDP component provides a SQL query engine that runs natively on Hadoop data without converting queries to MapReduce?

  1. Apache ZooKeeper
  2. Apache Oozie
  3. Apache Impala Correct answer.
  4. Apache Knox

Explanation

Impala is a massively parallel SQL engine that executes queries directly against HDFS and Ozone data using its own distributed query planner and daemons. Oozie, ZooKeeper, and Knox provide scheduling, coordination, and gateway functions rather than SQL execution.

Question 15Cloudera Data Platform Administration

A data steward wants to see which upstream Hive tables feed a downstream reporting table. Which Atlas capability answers this?

  1. YARN queue placement
  2. Ranger policy simulation
  3. Lineage tracking between entities Correct answer.
  4. Ozone bucket listing

Explanation

Atlas records lineage relationships between entities as jobs and queries run, so stewards can trace data flow from source tables to derived tables. Ranger policy simulation tests authorization outcomes, and YARN queue placement and bucket listing do not describe data provenance.

Question 16Cloudera Data Platform Administration

Which practice best protects the Cloudera Manager administrative interface in a production CDP cluster?

  1. Restrict access to trusted networks and require authenticated, role-based logins. Correct answer.
  2. Disable TLS so operators can connect without certificate warnings.
  3. Expose the interface on all network interfaces with the default admin account.
  4. Share a single administrator credential among all operators.

Explanation

The Cloudera Manager admin console controls the entire cluster, so it should be reachable only from trusted networks and protected by authenticated, individually attributed role-based accounts. Default shared credentials and disabled TLS weaken accountability and expose administrative traffic.

Question 17Cloudera Data Platform Administration

Which CDP service is used to index and search data, commonly supporting full-text search over HDFS and HBase content?

  1. Apache Atlas
  2. Apache Solr Correct answer.
  3. Apache Oozie
  4. Apache Knox

Explanation

Apache Solr in CDP provides distributed indexing and full-text search, often used with Lily HBase Indexer or batch indexing jobs. Oozie, Atlas, and Knox handle scheduling, metadata governance, and gateway access respectively.

Question 18Cloudera Data Platform Administration

An administrator wants to limit how much memory a single YARN container may request so that one application cannot monopolize a node. Which configuration controls this?

  1. The HDFS block size
  2. The maximum container memory setting in the YARN service configuration Correct answer.
  3. The Ranger audit log level
  4. The Hive metastore warehouse directory

Explanation

YARN enforces per-container memory limits through its resource configuration, so a single container cannot exceed the configured maximum. Block size affects file splitting in HDFS, the warehouse directory affects table storage location, and audit log level affects logging verbosity.

Question 19Cloudera Data Platform Administration

Which statement describes how Ranger policies interact with Atlas classifications in a CDP cluster?

  1. Atlas reads Ranger policies and rewrites them as classifications.
  2. Atlas enforces Ranger policies directly on HDFS DataNodes.
  3. Ranger tag-based policies reference Atlas tags to grant or deny access to classified resources. Correct answer.
  4. Ranger classifications are automatically converted into Atlas users.

Explanation

Atlas assigns classifications (tags) to entities, and Ranger tag-based policies use those tags to authorize access, so protecting a newly tagged column requires no per-path policy. Atlas does not rewrite Ranger policies, and Ranger does not create Atlas users.

Question 20Cloudera Data Platform Administration

Which CDP feature allows an administrator to define a reusable set of configuration settings and apply it consistently across multiple services?

  1. HDFS snapshot policies
  2. Hive metastore schema migrations
  3. Cloudera Manager service configuration and role groups Correct answer.
  4. Ozone volume quotas

Explanation

Cloudera Manager organizes roles into role groups so a configuration can be shared by many hosts running the same role, giving consistent settings across the cluster. Snapshots, quotas, and schema migrations address data recovery, storage limits, and metadata upgrades rather than configuration reuse.

Question 21Cloudera Data Platform Administration

A team needs point-in-time recovery of an HDFS directory after accidental deletion. Which CDP capability supports this?

  1. Enabling Ranger audit logging
  2. Increasing the replication factor
  3. Adding a YARN queue
  4. HDFS snapshots on the directory Correct answer.

Explanation

HDFS snapshots capture the state of a directory at a point in time and allow recovery of files as they existed then. Replication protects against hardware failure but not logical deletion, and audit logging or queue changes do not restore data.

Question 22Cloudera Data Platform Administration

Which action is required to make a newly created Ranger policy take effect for a Hive query?

  1. Disable Kerberos on the cluster.
  2. Recreate the Hive metastore database.
  3. Restart the HDFS NameNode.
  4. Save the policy so the Hive Ranger plugin refreshes and enforces it. Correct answer.

Explanation

Ranger plugins periodically poll for policy updates; saving the policy in Ranger makes it available for enforcement on the next refresh. Restarting the NameNode, recreating the metastore, or disabling Kerberos is unrelated and disruptive.

Question 23Cloudera Data Platform Administration

An administrator notices that HDFS is running low on space while many small files exist. Which approach most directly addresses the small-file problem in CDP?

  1. Consolidate small files with a compaction or archiving job before ingestion. Correct answer.
  2. Lower the HDFS replication factor to one.
  3. Increase the NameNode heap size indefinitely.
  4. Disable HDFS snapshots cluster-wide.

Explanation

Many small files burden the NameNode because each file consumes namespace memory; consolidating or archiving them reduces object count and metadata pressure. Heap increases only postpone the problem, and lowering replication to one sacrifices durability without fixing metadata overhead.

Question 24Cloudera Data Platform Administration

Which CDP service provides a distributed coordination layer used for leader election and configuration consistency among cluster services?

  1. Apache Oozie
  2. Apache Impala
  3. Apache Solr
  4. Apache ZooKeeper Correct answer.

Explanation

ZooKeeper maintains a consistent, highly available coordination service that CDP components use for leader election, configuration, and naming. Solr, Impala, and Oozie provide search, query execution, and workflow scheduling, not coordination primitives.

Question 25Cloudera Data Platform Administration

Which configuration in Cloudera Manager determines where Hive stores its table data by default?

  1. The Hive metastore warehouse directory property Correct answer.
  2. The Ozone replication factor
  3. The YARN scheduler maximum allocation
  4. The Ranger audit log destination

Explanation

Hive's default warehouse directory property specifies the HDFS or Ozone path where managed table data is written. YARN allocation, audit destinations, and replication factors affect resources, logging, and durability rather than table storage location.

Question 26Cloudera Data Platform Administration

In Cloudera Manager, which role type must be running for the Hive Metastore service to be available to HiveServer2 and Impala?

  1. The Hive Metastore Server role Correct answer.
  2. The YARN ResourceManager role
  3. The HiveServer2 role
  4. The Sentry Server role

Explanation

The Hive Metastore Server role hosts the metastore database access layer that stores table and partition metadata. HiveServer2 and Impala both connect to this metastore to resolve table definitions, so it must be running for queries against managed tables to compile.

Question 27Cloudera Data Platform Administration

An administrator wants Cloudera Manager to send an alert when any host's disk usage exceeds 85 percent. Which mechanism should be configured?

  1. A YARN queue capacity limit
  2. An alert publisher with a threshold trigger on the host disk metric Correct answer.
  3. A Ranger row filter policy
  4. A HDFS balancer threshold

Explanation

Cloudera Manager health tests and alert publishers evaluate metric thresholds and can trigger notifications when a value crosses a configured limit. Setting a threshold on the host disk usage metric and attaching an alert publisher delivers the desired warning.

Question 28Cloudera Data Platform Administration

Which CDP component is responsible for storing and serving the metadata, lineage, and classification information used for governance across Hive, HBase, and Kafka?

  1. Apache Knox
  2. Apache ZooKeeper
  3. Apache Oozie
  4. Apache Atlas Correct answer.

Explanation

Apache Atlas is the metadata and governance service in CDP, holding entity definitions, lineage graphs, and classification tags. Other services publish their metadata to Atlas so stewards can search and govern assets centrally.

Question 29Cloudera Data Platform Administration

A cluster administrator needs to grant a group read-only access to a specific HDFS directory while denying access elsewhere. Which combination implements this in a Kerberized CDP cluster?

  1. An Atlas classification applied to the directory
  2. POSIX permissions on the directory plus a matching HDFS Ranger policy Correct answer.
  3. A Hive column mask on the underlying table
  4. A YARN fair-share queue for the group

Explanation

HDFS authorization in CDP is enforced through HDFS Ranger policies, with POSIX permissions as the fallback baseline. Defining a Ranger policy that allows read for the group on that path, and leaving other paths without an allow, restricts access as required.

Question 30Cloudera Data Platform Administration

An administrator must ensure that Impala daemons can coordinate admission control and exchange metadata across nodes. Which service must be reachable and healthy for this coordination to work?

  1. Apache ZooKeeper Correct answer.
  2. Apache Sqoop
  3. Apache Parquet
  4. Apache Flume

Explanation

Impala uses ZooKeeper for service discovery, leader election for the statestore, and coordination of admission control. If ZooKeeper is unavailable, the cluster cannot reliably elect the statestore leader or track membership.

Question 31Cloudera Data Platform Administration

A production cluster must run a rolling restart of DataNodes with minimal data unavailability. Which HDFS configuration supports this by allowing the NameNode to tolerate a temporary loss of replicas?

  1. Setting the replication factor to one
  2. Disabling the HDFS trash interval
  3. Enabling maintenance mode on the hosts before restarting roles Correct answer.
  4. Enabling short-circuit local reads

Explanation

HDFS maintenance mode lets the NameNode treat missing replicas on hosts in maintenance as expected, avoiding immediate re-replication and under-replication alarms. An administrator places hosts in maintenance mode, restarts the DataNode roles, then exits maintenance mode.

Question 32Cloudera Data Platform Administration

Which Cloudera Manager concept groups hosts so that configuration overrides can be applied to a subset of the cluster without affecting others?

  1. Role groups Correct answer.
  2. Commission states
  3. Host templates
  4. Parcel repositories

Explanation

Role groups let an administrator assign a subset of role instances to a named group and apply configuration overrides only to that group. This is how differing settings, such as heap size, are scoped to specific hosts.

Question 33Cloudera Data Platform Administration

An administrator needs to back up the Cloudera Manager server's configuration and embedded database. Which action accomplishes this?

  1. Running the Cloudera Manager backup and disaster recovery feature Correct answer.
  2. Exporting a Ranger policy file
  3. Copying only the /var/log/cloudera-scm-server directory
  4. Taking an HDFS snapshot of the root directory

Explanation

Cloudera Manager includes a backup and disaster recovery capability that captures configuration, the embedded database, and related state. Restoring that backup allows recovery of the management server after failure.

Question 34Cloudera Data Platform Administration

Which CDP capability lets an administrator define a set of hosts and roles that can be started or stopped together as a logical unit?

  1. A parcel
  2. A cluster template
  3. A role group
  4. A service Correct answer.

Explanation

In Cloudera Manager, a service is the logical unit that groups related roles, such as all HDFS roles, so they can be started, stopped, and configured together. Administrators manage lifecycle operations at the service level.

Question 35Cloudera Data Platform Administration

A YARN application's containers are being killed because the requested memory exceeds the maximum allowed per container. Which configuration should the administrator adjust?

  1. yarn.nodemanager.vmem-check-enabled
  2. yarn.nodemanager.resource.memory-mb
  3. yarn.scheduler.maximum-allocation-mb Correct answer.
  4. mapreduce.map.memory.mb

Explanation

The scheduler maximum allocation setting caps the memory a single container request may specify. If an application asks for more than this value, the scheduler rejects or kills the request, so raising the limit (within node capacity) resolves the failure.

Question 36Cloudera Data Platform Administration

An administrator needs to verify that a newly installed CDP parcel is activated and that the cluster is using the expected software version. Where is this confirmed in Cloudera Manager?

  1. The Audits page
  2. The Parcels page showing distribution and activation status Correct answer.
  3. The Kerberos credentials page
  4. The Charts page for HDFS capacity

Explanation

The Parcels page lists each parcel, its version, and whether it is downloaded, distributed, and activated. Activation is the step that makes the parcel's software the running version for the cluster.

Question 37Cloudera Data Platform Administration

A security administrator wants to restrict which Hive databases a group can query, based on database name, without altering file permissions. Which Ranger policy type applies?

  1. A YARN queue policy
  2. A Hive database policy granting select on specific databases Correct answer.
  3. An HDFS path policy
  4. A ZooKeeper znode policy

Explanation

Ranger Hive policies operate on Hive resource hierarchies such as database, table, and column, so a database-scoped policy grants select only on the named databases. This enforces access at the SQL layer independent of underlying file permissions.

Question 38Cloudera Data Platform Administration

Which CDP service provides a web-based notebook and interactive query interface for analysts to run SQL and Spark workloads against cluster data?

  1. Apache Knox
  2. Apache Sentry
  3. Apache Hue Correct answer.
  4. Apache Slider

Explanation

Hue is the web UI in CDP that provides SQL editors, notebooks, and browsers for Hive, Impala, and Spark. Analysts use it to author and run queries interactively against governed data.

Question 39Cloudera Data Platform Administration

An administrator needs to make the Hive Metastore highly available so a single host failure does not interrupt metadata access. Which approach is appropriate in CDP?

  1. Store metadata in HDFS instead of a relational database
  2. Rely on the HiveServer2 high availability pair alone
  3. Run multiple Hive Metastore Server roles behind a load balancer and use a shared relational database Correct answer.
  4. Deploy a single metastore role on the busiest host

Explanation

The metastore is stateless with respect to metadata, which resides in a relational database. Running several metastore roles and directing clients through a load balancer provides availability, provided the backing database is itself resilient.

Question 40Cloudera Data Platform Administration

An administrator observes that a Hive query returns stale results after a table was updated by a different engine. Which action most directly refreshes the metadata the query engine uses?

  1. Running INVALIDATE METADATA or REFRESH on the affected table in Impala Correct answer.
  2. Rebuilding the Ranger policy cache
  3. Clearing the HDFS trash
  4. Restarting the YARN ResourceManager

Explanation

Impala caches table metadata, so changes made outside Impala may not be visible until the catalog is refreshed. REFRESH reloads metadata for a specific table, while INVALIDATE METADATA discards cached metadata more broadly.

Question 41Cloudera Data Platform Administration

Which HDFS feature allows an administrator to take a point-in-time, read-only view of a directory's contents for backup purposes?

  1. An erasure coding policy
  2. A federation namespace
  3. A block scanner
  4. An HDFS snapshot Correct answer.

Explanation

HDFS snapshots capture the state of a directory at a point in time and are read-only, making them suitable for backups and recovery from accidental changes. Snapshots can be taken on directories where the feature is enabled.

Question 42Cloudera Data Platform Administration

A cluster administrator must ensure that all Hive queries against a table containing sensitive columns return masked values for a group of users. Which mechanism enforces this?

  1. An Atlas lineage edge
  2. An HDFS ACL granting read on the directory
  3. A YARN node label restricting execution
  4. A Ranger masking policy on the table's sensitive columns Correct answer.

Explanation

Ranger masking policies apply column-level transformations for specified users or groups, so query results show masked values while other users see the real data. This is enforced at query time by the authorization plugin.

Question 43Cloudera Data Platform Administration

An administrator needs to add a new host to an existing CDP cluster and have the appropriate roles deployed automatically. Which Cloudera Manager workflow accomplishes this?

  1. Editing the Ranger policy repository
  2. Manually copying parcels to the host
  3. Using the Add Hosts wizard with a cluster template or host template Correct answer.
  4. Exporting the cluster's audit logs

Explanation

The Add Hosts wizard installs the Cloudera Manager agent, assigns host templates, and deploys the configured roles to the new host. This ensures consistent role placement and configuration across the cluster.

Question 44Cloudera Data Platform Administration

Which CDP component provides a centralized audit repository where Ranger authorization decisions and HDFS access events are recorded for later review?

  1. The YARN timeline server
  2. The Cloudera Manager Charts page
  3. The Hive Metastore database
  4. The Ranger Audit store backed by Solr or HDFS Correct answer.

Explanation

Ranger writes audit records for policy evaluations to configured destinations, such as Solr for searchable access or HDFS for durable storage. Administrators query these records to review who accessed which resources.

Question 45Cloudera Data Platform Administration

A cluster's HDFS NameNode heap is consistently near capacity due to a very large number of small files. Which action most directly reduces NameNode memory pressure without deleting data?

  1. Consolidating small files into larger files with a tool such as Hadoop Archive Correct answer.
  2. Lowering the replication factor to one
  3. Increasing the DataNode heap size
  4. Enabling short-circuit reads

Explanation

The NameNode holds metadata for every block and inode in memory, so many small files consume disproportionate heap. Archiving small files into larger containers reduces the number of inodes and blocks the NameNode must track.

Question 46Cloudera Data Platform Administration

An administrator must ensure that a service's configuration change is validated and applied across all role instances before it takes effect. Which Cloudera Manager action performs this?

  1. Restarting the affected roles after saving the configuration Correct answer.
  2. Exporting the cluster's diagnostic bundle
  3. Running the HDFS balancer
  4. Editing the parcel manifest

Explanation

Cloudera Manager saves configuration changes but requires a restart of the affected roles for them to take effect. The restart propagates the new configuration to each role instance and validates that they start successfully.

Question 47Cloudera Data Platform Administration

Which CDP service is responsible for authenticating users and issuing Kerberos tickets for services in a secure cluster?

  1. Apache Atlas
  2. Apache Ranger
  3. The Kerberos Key Distribution Center Correct answer.
  4. Apache Knox

Explanation

The Kerberos Key Distribution Center authenticates principals and issues tickets that services use to prove identity. In a secure CDP cluster, services obtain service principals and keytabs from the KDC.

Question 48Cloudera Data Platform Administration

An administrator wants to limit the number of concurrent YARN applications a single user can run to prevent resource monopolization. Which configuration applies?

  1. yarn.scheduler.capacity.user.maximum-applications Correct answer.
  2. yarn.nodemanager.resource.cpu-vcores
  3. yarn.scheduler.capacity.maximum-am-resource-percent
  4. mapreduce.job.reduces

Explanation

The Capacity Scheduler supports per-user limits, including a maximum number of applications that a user may have running concurrently. Setting this value constrains how many applications one user can launch at once.

Question 49Cloudera Data Platform Administration

Which Cloudera Manager feature allows an administrator to compare configuration across role instances and identify drift from the service-level default?

  1. The configuration comparison view showing non-default values per role Correct answer.
  2. The HDFS fsck output
  3. The Impala query profile
  4. The Audits page filtered by user

Explanation

Cloudera Manager's configuration view highlights values that differ from the service default and can compare settings across role instances. This helps administrators detect drift introduced by per-role overrides.

Question 50Cloudera Data Platform Administration

A team needs to ingest streaming events into HDFS and Hive tables with minimal custom code. Which CDP service is designed for this ingestion pattern?

  1. Apache ZooKeeper
  2. Apache Parquet
  3. Apache Oozie
  4. Apache Flume Correct answer.

Explanation

Flume is a data ingestion service that collects, aggregates, and moves streaming event data into sinks such as HDFS and Hive. Its agent-based configuration supports continuous ingestion without custom application code.