DEA-C01 Question 419
Single answerYou are a Data Engineer working on a data pipeline that processes sensitive financial data using Amazon EMR. Your team wants to ensure that only authorized users and applications can access the EMR cluster. Which authentication mechanism should you implement to meet this requirement?
- A
Enable Kerberos authentication for the EMR cluster.
- B
Use IAM roles to authenticate users accessing the EMR cluster.
- C
Configure EMR with a custom SSL certificate.
- D
Enable Simple AD integration for EMR authentication.
Show answer and explanation
Correct answer: A
Explanation
Enabling Kerberos authentication is the best practice for securing access to an EMR cluster that processes sensitive data. Kerberos provides strong authentication mechanisms and integrates well with Hadoop-based ecosystems like EMR. Other options, such as IAM roles or SSL certificates, serve different purposes but do not directly address the need for robust authentication for accessing the cluster.
- A. Correct.
Kerberos authentication is the most appropriate mechanism to ensure secure and authenticated access for users and applications interacting with the EMR cluster. It is specifically designed for scenarios requiring strong authentication.
- B. Incorrect.
IAM roles are used for managing permissions and authorizations but do not directly handle the authentication mechanisms for accessing EMR clusters.
- C. Incorrect.
While custom SSL certificates can ensure secure communication, they do not handle user authentication for accessing the EMR cluster.
- D. Incorrect.
Simple AD is used for lightweight directory services but is not a recommended authentication mechanism for securing sensitive workloads on EMR.