I85PREP
⌘ K
Cloudera CDP Administrator - Public Cloud study materials
Cloudera CDP Administrator - Public Cloud study resources

Cloudera CDP Administrator - Public Cloud practice questions

One question at a time. Build your Cloudera CDP Administrator - Public Cloud understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloudera CDP administration on public cloud (platform provisioning and cluster management)

In Cloudera CDP Public Cloud, which component is responsible for creating the environment and the underlying cloud resources (VPC, subnets, security groups) before a Data Hub can be launched?

  1. The Cloudera Runtime parcel repository
  2. The Data Warehouse virtual warehouse autoscaler
  3. The Cloudera Management Console environment service Correct answer.
  4. The Data Hub cluster template engine

Explanation

An environment in CDP Public Cloud is a logical container that binds a cloud account, region, network, and credentials together, and its creation provisions the foundational cloud resources. Data Hub clusters are then launched into an existing environment, so the environment must exist first.

Question 2Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud construct supplies the cloud identity (for example an AWS cross-account role or an Azure service principal) that CDP uses to create resources in your cloud account?

  1. The cluster blueprint
  2. The CDP credential Correct answer.
  3. The recipe
  4. The runtime version

Explanation

A CDP credential stores the cloud-provider identity and permissions that the control plane assumes when acting in your account. Environments and Data Hub clusters reference this credential rather than embedding secrets directly.

Question 3Cloudera CDP administration on public cloud (platform provisioning and cluster management)

When registering an AWS environment in CDP, what must exist in the target account so that the CDP control plane can assume a role?

  1. An EC2 key pair stored in the Cloudera Management Console
  2. A Route 53 private hosted zone dedicated to the cluster
  3. A cross-account IAM role with a trust policy for the CDP control plane account Correct answer.
  4. A public S3 bucket named after the environment

Explanation

CDP assumes an IAM role in your AWS account, so the role's trust policy must allow the CDP control plane principal to assume it. The role also needs permissions to create the network and compute resources CDP provisions.

Question 4Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants CDP to create a new VPC and subnets rather than reuse existing network infrastructure. Which environment networking choice accomplishes this?

  1. Use existing network
  2. Deploy without networking
  3. Register with a shared CDP network
  4. Create new network Correct answer.

Explanation

The environment wizard offers a choice between creating a new network and using an existing one. Selecting the create option makes CDP provision a VPC, subnets, and associated routing and security resources in the chosen region.

Question 5Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which statement correctly describes the relationship between environments and Data Hub clusters in CDP Public Cloud?

  1. A Data Hub cluster creates its own environment automatically at launch
  2. A Data Hub cluster is deployed into a single environment and inherits its region and network Correct answer.
  3. A Data Hub cluster spans multiple environments to achieve high availability
  4. An environment can contain only one Data Hub cluster at a time

Explanation

Environments define the cloud account, region, and network boundary, and each Data Hub cluster is created inside one environment. Multiple Data Hub clusters can therefore share the same environment and network.

Question 6Cloudera CDP administration on public cloud (platform provisioning and cluster management)

What is the primary purpose of a cluster definition (template) when creating a Data Hub cluster in CDP Public Cloud?

  1. It specifies the service layout, instance types, and node counts used to build the cluster Correct answer.
  2. It records the audit trail of administrative actions
  3. It defines the cloud credential that the control plane assumes
  4. It stores the long-term backup of the Data Lake metadata

Explanation

A cluster definition is the declarative description of what the cluster should look like, including the blueprint, instance types, and node group sizing. The management console uses it to render and launch the underlying cloud resources.

Question 7Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator needs a Data Hub cluster that includes Hive, Spark, and YARN but does not need HBase. Which CDP concept allows selecting exactly this set of services?

  1. The credential
  2. The image catalog
  3. The cluster blueprint Correct answer.
  4. The environment network

Explanation

Blueprints define which Cloudera Runtime services and roles are deployed on a cluster. Choosing a blueprint (or a custom one) determines the service composition of the Data Hub.

Question 8Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud service acts as the shared, persistent data lake that Data Hub clusters and Data Warehouse connect to for metastore and storage?

  1. The Cloudera DataFlow deployment
  2. The Data Warehouse virtual warehouse
  3. The Data Lake cluster (SDX) Correct answer.
  4. The Data Hub cluster

Explanation

The Data Lake cluster provides shared services such as the metastore, Ranger policies, and identity management that other compute clusters consume. Data Hub and Data Warehouse workloads attach to it rather than duplicating those services.

Question 9Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator deletes a Data Hub cluster after a batch workload completes. What happens to data stored in the environment's cloud object storage?

  1. It remains in the object storage bucket because storage is external to the cluster Correct answer.
  2. It is automatically archived to the Data Lake's local disk
  3. It is deleted together with the cluster's compute instances
  4. It is moved into the cluster's ephemeral volumes

Explanation

Compute and storage are decoupled in CDP Public Cloud, so deleting a Data Hub cluster removes only the compute resources. Data written to the environment's object storage bucket persists independently of any cluster lifecycle.

Question 10Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which mechanism lets an administrator run custom scripts on cluster nodes during Data Hub deployment, for example to install an agent or adjust OS parameters?

  1. Cluster definitions
  2. Recipes Correct answer.
  3. Blueprints
  4. Parcel distributions

Explanation

Recipes are scripts attached to cluster creation that execute on nodes at defined deployment phases. They are the supported way to apply host-level customization without building a custom image.

Question 11Cloudera CDP administration on public cloud (platform provisioning and cluster management)

After a Data Hub cluster is running, an administrator changes a service configuration through the Cloudera Management Console. What is required for the change to take effect on the running services?

  1. Re-register the cloud credential
  2. Recreate the environment to propagate the change
  3. Re-upload the runtime parcel
  4. Restart the affected services so they pick up the updated configuration Correct answer.

Explanation

Configuration edits update the stored service configuration, but running processes keep their old settings until restarted. A service restart applies the new values to the affected roles.

Question 12Cloudera CDP administration on public cloud (platform provisioning and cluster management)

What is the effect of enabling autoscaling on a Data Hub cluster that supports it?

  1. Object storage capacity is provisioned ahead of demand
  2. The environment's VPC is expanded with additional subnets
  3. The cluster's master node count is increased to three automatically
  4. Worker nodes are added or removed based on load thresholds defined in the cluster configuration Correct answer.

Explanation

Autoscaling adjusts the number of worker nodes within configured minimum and maximum bounds in response to load. It does not change master topology, networking, or storage provisioning.

Question 13Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud capability provides centralized identity federation so that users authenticate once and access multiple Data Hub and Data Warehouse experiences?

  1. The Ranger policy repository
  2. The per-cluster local Kerberos database
  3. The Atlas metadata server
  4. The CDP control plane's identity provider integration Correct answer.

Explanation

CDP Public Cloud federates authentication through an identity provider configured at the control-plane level, so users sign in once and are recognized across services. Per-cluster local identity stores are not the mechanism for cross-service single sign-on.

Question 14Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants a Data Hub cluster to use a specific instance type for worker nodes to reduce cost while keeping masters on a larger type. Which configuration element controls this?

  1. The credential's IAM policy
  2. Instance type settings per node group in the cluster definition Correct answer.
  3. The runtime parcel version
  4. The environment's region selection

Explanation

Node groups in a cluster definition each carry their own instance type, so masters and workers can be sized independently. This is the supported way to right-size compute for cost and performance.

Question 15Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which statement best describes how CDP Public Cloud clusters obtain Cloudera Runtime software during deployment?

  1. The control plane copies runtime binaries over SSH from the administrator's workstation
  2. Nodes download parcels from a configured parcel repository during cluster creation Correct answer.
  3. Runtime software is embedded in the environment's VPC configuration
  4. Each node compiles the runtime from source at boot time

Explanation

Cluster nodes retrieve parcels from a parcel repository, which may be the Cloudera-hosted repository or a customer-managed mirror. The deployment process distributes and activates those parcels on each host.

Question 16Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator must keep all cluster traffic inside the corporate network and avoid public endpoints. Which CDP Public Cloud feature should be used?

  1. Public IP assignment on every node
  2. Disabling the environment's security groups
  3. Private networking with private link access to CDP services Correct answer.
  4. A shared public S3 bucket for cluster traffic

Explanation

CDP Public Cloud supports private connectivity options so that control-plane and service traffic does not traverse the public internet. This is the appropriate design when public endpoints are prohibited.

Question 17Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A Data Hub cluster fails during provisioning because the specified subnet has no route to the required endpoints. Which area should the administrator inspect first?

  1. The environment's network configuration, including route tables and NAT or endpoints Correct answer.
  2. The number of YARN queues defined in the cluster
  3. The cluster's Hive metastore schema version
  4. The Ranger audit destination path

Explanation

Provisioning requires nodes to reach package repositories and control-plane endpoints, so missing routes or NAT gateways cause failures. Reviewing route tables, NAT configuration, and any private endpoints is the correct first step.

Question 18Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud artifact allows an administrator to reproduce an identical Data Hub cluster configuration across development, test, and production environments?

  1. A manual list of node hostnames from the first cluster
  2. A saved cluster definition referencing the same blueprint, instance types, and recipes Correct answer.
  3. A screenshot of the cluster summary page
  4. The cluster's Kerberos keytab file

Explanation

Because a cluster definition captures the blueprint, sizing, and recipe choices, reusing it produces consistent clusters in other environments. Hostnames and screenshots are not portable configuration inputs.

Question 19Cloudera CDP administration on public cloud (platform provisioning and cluster management)

What does the CDP Public Cloud environment's region setting determine?

  1. The number of virtual warehouses in Data Warehouse
  2. The retention period for Ranger audit records
  3. The Cloudera Runtime version installed on clusters
  4. The cloud region where the environment's network and clusters are created Correct answer.

Explanation

Region is chosen when the environment is registered and fixes where the VPC, subnets, and cluster instances are placed. It also influences data residency and latency to on-premises systems.

Question 20Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants to stop a Data Hub cluster outside business hours to reduce cost while preserving its configuration for later restart. Which approach fits CDP Public Cloud?

  1. Delete the cluster and recreate it later from the saved cluster definition Correct answer.
  2. Detach the environment's credential until the next morning
  3. Stop the underlying EC2 instances directly in the cloud console
  4. Remove the runtime parcel from the repository

Explanation

Data Hub clusters in CDP Public Cloud are intended to be ephemeral, so the supported cost-saving pattern is to delete them and recreate from a saved definition when needed. Manually stopping instances bypasses the control plane and leaves inconsistent state.

Question 21Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud component stores the authorization policies that govern access to Data Lake and Data Hub resources?

  1. Apache Ranger Correct answer.
  2. Apache Atlas
  3. Apache Knox
  4. Apache Oozie

Explanation

Ranger is the policy engine that evaluates and enforces fine-grained authorization across the platform's data services. Atlas handles metadata and lineage, while Knox provides a gateway and Oozie schedules workflows.

Question 22Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A cluster deployment fails with an error that the requested instance type is not available in the selected availability zone. What is the most appropriate remediation?

  1. Choose an instance type available in that zone or adjust the environment's subnet and zone selection Correct answer.
  2. Switch the cluster to a different blueprint
  3. Increase the number of master nodes to three
  4. Change the runtime parcel version to an older release

Explanation

Instance availability varies by availability zone, so the fix is to align the instance type with the zone or change which subnets and zones the environment uses. The error is a capacity and placement issue, not a software or topology issue.

Question 23Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which of the following is a valid reason to create multiple environments within a single CDP Public Cloud account?

  1. To reduce the runtime parcel download size
  2. To allow a single Data Hub cluster to span two regions
  3. To increase the number of master nodes in a cluster
  4. To separate production and development workloads into distinct networks and regions Correct answer.

Explanation

Each environment has its own region and network boundary, so multiple environments provide isolation between workload tiers. This is a common pattern for separating production from non-production resources.

Question 24Cloudera CDP administration on public cloud (platform provisioning and cluster management)

What is the role of the CDP control plane in relation to Data Hub clusters running in a customer's cloud account?

  1. It orchestrates provisioning and management by calling cloud APIs using the registered credential Correct answer.
  2. It runs the customer's Spark jobs on Cloudera infrastructure
  3. It replaces the need for any IAM or service principal permissions
  4. It stores all customer data inside the Cloudera-hosted account

Explanation

The control plane is the management layer that creates and manages resources in your account by assuming the registered credential. Customer data and workload processing remain in the customer's cloud account.

Question 25Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator needs to grant a new team access to launch Data Hub clusters but must prevent them from modifying the environment's network settings. Which CDP Public Cloud mechanism enforces this?

  1. Role-based access control assignments scoped to environments and resources Correct answer.
  2. Security group rules on the environment's subnets
  3. The parcel repository's directory permissions
  4. The cluster's YARN capacity scheduler queues

Explanation

CDP Public Cloud uses role-based access control to assign permissions at the environment and resource level, so a team can be allowed to manage clusters without environment administration rights. Network security groups control traffic, not user permissions.

Question 26Cloudera CDP administration on public cloud (platform provisioning and cluster management)

In CDP Public Cloud, which component is responsible for creating and managing the cloud resources (networking, storage, and cluster instances) that a Data Hub runs on?

  1. The Ranger policy server in the environment
  2. The Knox gateway on the Data Hub edge node
  3. The Cloudera Manager server running inside the Data Lake
  4. The CDP control plane, which orchestrates provisioning through the cloud provider APIs Correct answer.

Explanation

The CDP control plane is the hosted management layer that talks to the cloud provider APIs to create environments and clusters. Cloudera Manager inside a cluster manages services, not the underlying cloud resource lifecycle. Ranger and Knox are runtime security and access components, not provisioning engines.

Question 27Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants to deploy a Data Hub cluster that reads and writes tables in the shared data lake. Which CDP Public Cloud construct must exist first so the cluster has a metastore and storage to attach to?

  1. A Data Hub cluster with an embedded metastore
  2. A Data Lake (environment) with its Data Warehouse and storage Correct answer.
  3. A Kafka cluster registered in the environment
  4. A standalone Hive metastore VM in the same subnet

Explanation

Data Hub clusters attach to the environment's Data Lake, which provides the shared metastore, storage, and governance services. Without an environment containing a Data Lake, a Data Hub has nothing to bind its tables and storage to.

Question 28Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator must choose an environment type when creating a CDP environment. Which choice reflects a valid CDP Public Cloud environment type distinction?

  1. A 'development' environment that disables TLS and Kerberos
  2. A 'production' environment that always spans three cloud regions
  3. A 'base' or 'data mart' style environment depending on whether a Data Lake is created Correct answer.
  4. A 'trial' environment limited to a single node cluster

Explanation

CDP environments are created either with a Data Lake (a full environment) or without one (often used for data mart or compute-only patterns). Environment type does not toggle security off or force multi-region deployment.

Question 29Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A team needs a Data Hub cluster definition that pins the Cloudera Runtime version and the list of services. Where does an administrator manage these reusable cluster definitions in CDP Public Cloud?

  1. In the Ranger service policy repository
  2. In the CDP console's Data Hub cluster definitions section Correct answer.
  3. In the Cloudera Manager administration page of the Data Lake
  4. In the cloud provider's launch template console

Explanation

Cluster definitions (templates) are managed centrally in the CDP console and referenced when a Data Hub is launched. They capture runtime version, service selection, and instance group sizing. Cloudera Manager, cloud launch templates, and Ranger do not store these definitions.

Question 30Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator must give a Data Hub cluster access to read objects in a cloud storage bucket that holds the data lake. Which approach aligns with CDP Public Cloud identity design?

  1. Embed long-lived access keys in each service's configuration file
  2. Open the bucket publicly and restrict access by source IP
  3. Disable Ranger auditing so the cluster can read any bucket
  4. Assign an instance profile or service role to the cluster's IDBroker-mapped cloud identity Correct answer.

Explanation

CDP uses IDBroker to map cluster identities to cloud IAM roles or instance profiles, giving short-lived credentials to services. This avoids static keys in configuration files and never requires public buckets.

Question 31Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants to scale a Data Hub cluster's worker group from 6 to 10 nodes after it is running. What is the supported CDP Public Cloud action?

  1. Delete and recreate the cluster with a larger template
  2. Edit the cloud provider autoscaling group directly and leave CDP unaware
  3. Add nodes manually with the bootstrap script on new VMs
  4. Use the console or API to increase the instance count on that instance group Correct answer.

Explanation

CDP supports resizing instance groups on a running Data Hub through the console or API, which reconciles the cluster with the new count. Editing cloud autoscaling groups directly or hand-bootstrapping nodes bypasses CDP management and is unsupported.

Question 32Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A Data Hub deployment is stuck because the environment's cloud storage location for logs and data was deleted out of band. Which immediate remediation should the administrator consider?

  1. Restart the Cloudera Manager server on the Data Lake
  2. Change the environment region to force new storage
  3. Restore or recreate the required storage location and retry the deployment Correct answer.
  4. Disable Kerberos on the environment to bypass the check

Explanation

Cluster provisioning depends on the environment's storage buckets for logs, data, and runtime artifacts. If those locations are missing, they must be restored or recreated before retrying; security and region changes do not fix missing storage.

Question 33Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud feature lets an administrator define the exact CPU, memory, and storage profile for each group of nodes in a Data Hub cluster?

  1. Ranger policy sets
  2. The environment's audit pipeline
  3. The Knox topology file
  4. Instance groups within the cluster definition Correct answer.

Explanation

Instance groups bundle node role assignments with a chosen cloud instance type and count, and they are declared in the cluster definition. Ranger, Knox, and audit pipelines are runtime services and do not size compute.

Question 34Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator needs to run a workload that requires ephemeral compute only, with no persistent data lake of its own, and wants to minimize cost. Which CDP Public Cloud pattern fits?

  1. Deploy a standalone Cloudera Manager on a single VM
  2. Create a second full environment with its own Data Lake
  3. Provision a managed Kafka cluster only
  4. Launch a Data Hub cluster attached to an existing environment's Data Lake Correct answer.

Explanation

Ephemeral compute workloads should attach as Data Hubs to an existing Data Lake so they reuse shared storage and metastore. Creating another full Data Lake duplicates cost, and the other options do not provide the required compute services.

Question 35Cloudera CDP administration on public cloud (platform provisioning and cluster management)

What does the CDP Public Cloud 'environment' primarily group together for administration?

  1. A Data Lake, its cloud network and storage, and the credentials used to manage them Correct answer.
  2. The list of users synced from an identity provider
  3. Only the Ranger policies for one tenant
  4. A single Data Hub cluster and its Cloudera Manager

Explanation

An environment is the administrative container that binds a Data Lake to its networking, storage, and cloud credential configuration. Data Hubs are launched into an environment, and users and policies are managed at other layers.

Question 36Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants new Data Hub clusters to use a hardened image that includes a required security agent. Which CDP Public Cloud mechanism should be used?

  1. A post-deployment SSH script run by an operator
  2. A custom AMI or image registered with CDP and referenced in the cluster definition Correct answer.
  3. A cloud provider patch baseline applied after launch
  4. A Ranger policy that installs packages

Explanation

CDP supports custom images that administrators register and reference so new clusters boot from the hardened base. Package installation through Ranger or manual SSH is not a provisioning mechanism, and post-launch patching does not guarantee the agent at boot.

Question 37Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A Data Hub cluster must reach the CDP control plane endpoints to be managed, but the administrator wants no inbound public access to cluster nodes. Which network design satisfies this?

  1. Disable the environment's outbound internet access entirely
  2. Place nodes in a private subnet with a NAT gateway or private endpoints for outbound control-plane traffic Correct answer.
  3. Place nodes in a public subnet with security groups open to all inbound traffic
  4. Attach an elastic IP to every node and allow inbound SSH from anywhere

Explanation

CDP requires outbound connectivity from cluster nodes to control-plane endpoints, which a NAT gateway or private endpoints can provide from a private subnet. Inbound public exposure is not required, and blocking all outbound traffic breaks management.

Question 38Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator must ensure that only approved CIDR ranges can reach the Data Hub's Knox gateway. Which CDP Public Cloud control is appropriate?

  1. An audit log retention setting
  2. A Cloudera Manager alert on gateway restarts
  3. A Ranger row filter on the Knox database
  4. A security group or firewall rule restricting inbound access to the gateway port Correct answer.

Explanation

Network-level access to Knox is controlled by cloud security groups or firewall rules limiting inbound traffic to approved CIDRs. Ranger filters apply to data access, and alerts or audit retention do not restrict connectivity.

Question 39Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which statement describes how an administrator upgrades the Cloudera Runtime version of an existing Data Hub cluster in CDP Public Cloud?

  1. Runtime is patched in place automatically every night by the control plane
  2. Runtime upgrades require deleting the Data Lake first
  3. Runtime upgrades happen only by launching a new Data Hub on the target version and migrating workloads Correct answer.
  4. Runtime version is fixed at environment creation and can never change

Explanation

CDP Data Hub clusters are immutable with respect to major runtime version, so moving to a new runtime means creating a new cluster on the desired version and migrating workloads. The control plane does not silently patch runtime versions, and the Data Lake need not be deleted.

Question 40Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants to automate Data Hub creation in a CI/CD pipeline. Which CDP Public Cloud interface is designed for this?

  1. The Ranger admin console
  2. The Cloudera Manager web UI
  3. The Knox gateway login page
  4. The CDP command line interface and REST API Correct answer.

Explanation

The CDP CLI and REST API expose environment and cluster lifecycle operations for automation. The Cloudera Manager UI, Ranger console, and Knox login are interactive interfaces not intended for provisioning automation.

Question 41Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A Data Hub cluster is deleted but the administrator needs its Cloudera Manager configuration history for an audit. What should have been done beforehand?

  1. Export or back up the cluster configuration and logs before deletion Correct answer.
  2. Rely on the control plane to retain all cluster configuration indefinitely
  3. Assume Cloudera Manager keeps history after the cluster is gone
  4. Enable autoscaling so history is preserved

Explanation

Deleting a Data Hub removes the cluster and its Cloudera Manager instance, so configuration and logs must be exported beforehand if they are needed. The control plane does not indefinitely retain per-cluster configuration, and autoscaling is unrelated.

Question 42Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud capability helps an administrator control cloud spend by automatically adjusting the number of worker nodes based on load?

  1. Knox gateway routing
  2. Cloudera Manager alerting
  3. Data Hub autoscaling Correct answer.
  4. Ranger policy evaluation

Explanation

Data Hub autoscaling adds or removes worker nodes in response to configured load metrics, directly affecting compute cost. Ranger, Knox, and alerting do not change node counts.

Question 43Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator needs to know which cloud region an environment's Data Lake and its Data Hubs will run in. Where is this determined?

  1. By the Ranger policy repository location
  2. By the environment's region setting at creation Correct answer.
  3. Per Data Hub cluster at launch time, independent of the environment
  4. By the Cloudera Manager server's time zone

Explanation

The environment is created in a specific cloud region, and its Data Lake and Data Hubs run there. A Data Hub cannot be placed in a different region from its environment, and time zone or policy location do not set region.

Question 44Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A security review requires that all access to Data Hub service UIs be brokered through a single authenticated endpoint. Which CDP Public Cloud component provides this?

  1. The Knox gateway Correct answer.
  2. The Ranger policy server
  3. The IDBroker service
  4. The Cloudera Manager agent

Explanation

Knox is the gateway that brokers authenticated access to service UIs and REST endpoints on a cluster. IDBroker issues cloud credentials, Ranger enforces authorization, and the Cloudera Manager agent runs on nodes for management.

Question 45Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator must confirm that a newly provisioned Data Hub is healthy before handing it to users. Which check is most appropriate?

  1. Confirm the environment region matches the administrator's locale
  2. Verify the cluster status is running and run the built-in service health checks in Cloudera Manager Correct answer.
  3. Ensure the Knox gateway certificate expires soon
  4. Check that the cloud billing dashboard shows charges

Explanation

A healthy handoff requires confirming the cluster reached a running state and that Cloudera Manager health checks for its services pass. Billing, locale, and certificate expiry do not validate service health.

Question 46Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator wants to enforce that a Data Hub cluster can use only a pre-approved set of cloud instance types. Which CDP Public Cloud approach supports this governance?

  1. Restrict the instance types available in the cluster definition and environment configuration Correct answer.
  2. Turn off autoscaling on every cluster
  3. Disable the CDP CLI for all users
  4. Ask users to promise not to choose larger types

Explanation

Governance over instance types is achieved by limiting the options exposed through cluster definitions and environment configuration so users can only pick approved types. Reliance on user promises, disabling the CLI, or turning off autoscaling does not enforce type selection.

Question 47Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which CDP Public Cloud action is required before a Data Hub can be launched into an environment that was created without a Data Lake?

  1. Disable Kerberos on the environment
  2. Delete the environment and start over in another cloud
  3. Create a Data Lake in that environment or attach the Data Hub to an environment that has one Correct answer.
  4. Add a second Ranger policy repository

Explanation

A Data Hub needs a Data Lake for shared storage, metastore, and governance, so the environment must contain one or the cluster must target an environment that does. Kerberos changes, region moves, or extra policy repositories do not supply a Data Lake.

Question 48Cloudera CDP administration on public cloud (platform provisioning and cluster management)

An administrator needs to tag Data Hub cloud resources so chargeback reports attribute cost to the right team. What should be configured?

  1. Knox rewrite rules
  2. Ranger resource tags only
  3. Cloudera Manager alert thresholds
  4. Custom tags or labels applied through the environment and cluster configuration Correct answer.

Explanation

Cloud cost attribution relies on provider tags or labels applied to the resources CDP creates, configured through environment and cluster settings. Ranger tags govern data access, and Knox rules or alert thresholds do not affect billing attribution.

Question 49Cloudera CDP administration on public cloud (platform provisioning and cluster management)

A Data Hub cluster deployment fails with an error that the environment's cloud credential is invalid. What is the most likely cause?

  1. The Knox certificate expired
  2. The cluster definition lists too many services
  3. The Ranger audit queue is full
  4. The cloud cross-account role or credential configured for the environment was removed or had its trust changed Correct answer.

Explanation

CDP uses a cloud credential, typically a cross-account role, to provision resources in the customer account. If that role is deleted or its trust policy changes, provisioning fails with a credential error. Service count, Knox certificates, and audit queues do not cause credential failures.

Question 50Cloudera CDP administration on public cloud (platform provisioning and cluster management)

Which task is part of routine administration of a running Data Hub cluster in CDP Public Cloud?

  1. Recreating the Data Lake every week
  2. Manually installing the Cloudera Runtime on each node
  3. Reviewing Cloudera Manager health and service alerts and acting on them Correct answer.
  4. Editing the control plane's source code

Explanation

Day-to-day administration centers on monitoring health and alerts through Cloudera Manager and remediating issues. Runtime installation, Data Lake recreation, and control-plane changes are neither routine nor supported tasks.