View Full Confluent CCDAK Exam Dumps and Practice Test Dumps

 

Question 241

What does listener.security.protocol.map define?

1. Topic retention periods
2. Consumer group mappings
3. Partition replica placement
4. Listener security mappings

Correct Answer: 4

Explanation:

The listener.security.protocol.map configuration associates named Kafka listeners with their corresponding security protocols. For example, a listener named INTERNAL can be mapped to SASL_SSL, while another listener can use PLAINTEXT. This allows different listeners to provide different communication and security characteristics within the same Kafka deployment. It is especially useful when configuring separate internal, external, client, or controller communication paths. The setting does not control topic retention, partition placement, or consumer-group behavior. Correct listener-to-protocol mapping is essential for clients and brokers to communicate using the intended security mechanism.

Question 242

Which setting selects the SASL authentication mechanism?

1. security.protocol
2. sasl.mechanism
3. ssl.client.auth
4. listener.name

Correct Answer: 2

Explanation:

The sasl.mechanism setting specifies which SASL mechanism a Kafka client uses when authenticating. Depending on the environment, mechanisms can include SCRAM, GSSAPI, or OAUTHBEARER. The selected mechanism must be supported and appropriately configured by the Kafka broker and client. security.protocol determines the broader communication protocol, such as SASL_SSL, but does not identify the specific SASL authentication mechanism. Choosing the correct SASL mechanism is important because authentication configuration must match between the client and the broker. Incorrect mechanism selection can prevent successful client authentication even when the security protocol itself is configured correctly.

Question 243

Which SASL mechanism uses salted password-based authentication?

1. SCRAM-SHA-512
2. GSSAPI
3. OAUTHBEARER
4. PLAIN

Correct Answer: 1

Explanation:

SCRAM-SHA-512 is a password-based SASL mechanism that uses the Salted Challenge Response Authentication Mechanism with SHA-512 hashing. Kafka supports SCRAM authentication for clients that need password-based authentication without transmitting the password directly as plain text. During authentication, the client and server perform a challenge-response exchange using credentials stored by the broker. GSSAPI is commonly associated with Kerberos, OAUTHBEARER uses OAuth tokens, and PLAIN uses straightforward username/password authentication. SCRAM-SHA-512 provides a stronger hashed authentication approach and is commonly selected when Kafka deployments require password-based authentication with improved credential protection.

Question 244

Which SSL setting identifies the trusted certificate store?

1. ssl.keystore.location
2. ssl.keystore.password
3. ssl.truststore.location
4. ssl.key.password

Correct Answer: 3

Explanation:

The ssl.truststore.location setting specifies where the truststore containing trusted certificates is located. A truststore helps Kafka clients or brokers determine which certificate authorities or certificates they trust when establishing TLS connections. The keystore serves a different purpose by holding the local identity certificate and private key. Password settings protect stored credentials but do not identify the actual truststore file. Correct truststore configuration is particularly important when Kafka components communicate over TLS and need to validate certificates presented by remote peers. Without appropriate trust material, certificate validation can fail during connection establishment.

Question 245

Which Kafka CLI changes broker configuration dynamically?

1. kafka-console-producer
2. kafka-dump-log
3. kafka-storage
4. kafka-configs

Correct Answer: 4

Explanation:

The kafka-configs command-line utility is used to view and modify configurable Kafka resources, including broker and topic configurations. It can apply dynamic configuration changes without requiring a full broker restart for settings that support dynamic updates. Administrators commonly use it with resource types and configuration properties to inspect or alter operational behavior. The console producer is intended for producing records interactively, while storage utilities handle storage-related operations. Understanding the correct administrative CLI helps operators manage Kafka clusters efficiently and apply supported configuration changes through controlled procedures.

Question 246

Which command is primarily used to create Kafka topics?

1. kafka-topics
2. kafka-console-consumer
3. kafka-run-class
4. kafka-verifiable-producer

Correct Answer: 1

Explanation:

The kafka-topics command-line utility manages Kafka topics. Administrators can use it to create topics, describe existing topics, alter supported topic properties, and delete topics when deletion is enabled. Topic creation commonly specifies attributes such as partition count and replication factor. The console consumer reads records, while other utilities support different administrative or testing functions. Using kafka-topics provides a standard command-line interface for managing topic-level resources. Administrators should still apply appropriate permissions and operational controls when modifying production topics because changes to partitioning and replication can affect workloads.

Question 247

Which CLI helps inspect consumer-group offsets and lag?

1. kafka-consumer-groups
2. kafka-metadata-quorum
3. kafka-broker-api-versions
4. kafka-log-dirs

Correct Answer: 1

Explanation:

The kafka-consumer-groups utility provides administrative information about Kafka consumer groups. It can display group membership, assigned partitions, committed offsets, log-end offsets, and consumer lag. Administrators can use this information to troubleshoot delayed processing, investigate group behavior, or inspect committed positions. The other commands focus on different areas of Kafka administration, such as metadata quorum information, supported broker APIs, or log-directory inspection. Monitoring consumer-group state is important for identifying processing bottlenecks and understanding whether applications are keeping pace with records being produced to their assigned partitions.

Question 248

What does allow.everyone.if.no.acl.found control?

1. TLS certificate validation
2. Access when ACLs are absent
3. SASL credential storage
4. Broker listener selection

Correct Answer: 2

Explanation:

The allow.everyone.if.no.acl.found setting determines whether access is allowed when no ACL is found for a resource. This setting can influence the authorization behavior of a Kafka cluster when requests do not match an existing ACL. Administrators must understand its security implications because allowing access by default can broaden resource accessibility. ACL-based authorization is normally designed to explicitly define which principals can perform specific operations. The setting does not configure TLS validation, SASL credential storage, or listener selection. Its behavior should therefore be evaluated carefully when designing Kafka authorization policies.

Question 249

Which ACL operation grants permission to create topics?

1. READ
2. DESCRIBE
3. DELETE
4. CREATE

Correct Answer: 4

Explanation:

The Kafka CREATE ACL operation controls permission to create topics or other resources where the operation applies. Authorization rules can restrict which principals are permitted to perform resource-creation actions. This is different from READ, which controls consumption-related access, and DESCRIBE, which relates to metadata inspection. DELETE governs deletion operations. Using precise ACL permissions follows the principle of granting only the access required by a user or application. In production environments, administrators should carefully define resource patterns and principals so applications receive the required capabilities without unnecessary administrative privileges.

Question 250

What does an ACL host field restrict?

1. Source client location
2. Schema compatibility mode
3. Consumer offset range
4. Topic partition count

Correct Answer: 1

Explanation:

An ACL host restriction determines which client host addresses a permission applies to. Kafka ACLs can therefore distinguish access based not only on the authenticated principal and resource but also on the originating host. This can provide an additional authorization boundary for clients connecting from approved locations. The host field does not determine schema compatibility, consumer offsets, or the number of topic partitions. When configuring host-based ACL rules, administrators should understand the network topology and client connection sources so that legitimate applications are not unintentionally denied access.

Question 251

Which setting enables automatic preferred-leader balancing?

1. leader.imbalance.check.interval.seconds
2. auto.leader.rebalance.enable
3. controlled.shutdown.enable
4. unclean.leader.election.enable

Correct Answer: 2

Explanation:

The auto.leader.rebalance.enable configuration controls whether Kafka automatically attempts to rebalance partition leadership toward preferred leaders. Over time, leadership can become uneven because of broker restarts, failures, or other operational events. Automatic leader rebalancing can help restore the intended distribution of leadership across brokers. The imbalance-check interval determines how frequently Kafka checks for imbalance, while controlled shutdown and unclean leader election address different operational behaviors. Proper leader distribution can improve resource utilization because the partition leader handles client requests and coordinates replication for its partition.

Question 252

What does leader.imbalance.per.broker.percentage measure?

1. Consumer assignment variance
2. Disk utilization deviation
3. Preferred-leader imbalance threshold
4. Network throughput ceiling

Correct Answer: 3

Explanation:

The leader.imbalance.per.broker.percentage setting defines the threshold for considering a broker’s partition leadership distribution imbalanced relative to its preferred leadership. Kafka can use this threshold when determining whether leader rebalancing is necessary. A suitable threshold helps balance the desire for evenly distributed leadership with the overhead of frequent rebalancing. The setting is not a consumer assignment limit, disk utilization threshold, or network throughput setting. Because partition leaders handle client traffic, excessive leadership concentration on a subset of brokers can create uneven workload distribution across a Kafka cluster.

Question 253

What does connections.max.idle.ms control?

1. Producer batch size
2. Replica fetch frequency
3. Consumer session duration
4. Idle connection lifetime

Correct Answer: 4

Explanation:

The connections.max.idle.ms setting controls how long a network connection can remain idle before Kafka closes it. Kafka brokers and clients maintain network connections for communication, but inactive connections can consume resources unnecessarily. An appropriate idle timeout helps manage connection resources while still allowing applications to maintain useful persistent connections. The setting does not control producer batching, replica-fetch frequency, or consumer session timing. Administrators should consider application connection patterns when selecting connection-related settings because aggressive timeouts may cause unnecessary reconnections, while excessively long idle periods can retain unused network resources.

Question 254

What does replica.lag.time.max.ms monitor?

1. Replica follower lag time
2. Producer retry interval
3. Consumer polling delay
4. Controller heartbeat period

Correct Answer: 1

Explanation:

The replica.lag.time.max.ms setting relates to how long a follower replica can remain without making sufficient progress before Kafka considers it out of sync with the leader. Replica synchronization is important because Kafka relies on replicated partitions for fault tolerance. If a follower falls behind beyond the configured threshold, it can lose its in-sync status. This setting therefore helps Kafka identify replicas that are not keeping up with their leaders. It is distinct from producer retry timing, consumer polling behavior, and controller communication mechanisms.

Question 255

What does replica.fetch.min.bytes influence?

1. Producer request aggregation
2. Minimum replica fetch response
3. Consumer batch allocation
4. Topic segment sizing

Correct Answer: 2

Explanation:

The replica.fetch.min.bytes setting specifies the minimum amount of data the broker should provide to a replica fetch request before responding, subject to the associated fetch timing constraints. It can influence replication efficiency by allowing replica fetchers to retrieve larger amounts of data rather than repeatedly processing very small responses. This setting applies to broker replica fetching rather than normal consumer fetching. Producer request aggregation, consumer batch allocation, and topic segment sizing are controlled by different configurations. Proper tuning can help balance replication throughput and latency in busy Kafka clusters.

Question 256

Which assignor supports cooperative consumer rebalancing?

1. RangeAssignor
2. CooperativeStickyAssignor
3. LegacyRoundRobin
4. SimpleAssignor

Correct Answer: 2

Explanation:

CooperativeStickyAssignor supports cooperative rebalancing for Kafka consumer groups. Instead of revoking all existing assignments during every rebalance, cooperative rebalancing can make incremental assignment changes. This can reduce unnecessary interruptions for consumers because partitions that do not need to move can remain assigned. The assignor also aims to preserve balanced and stable assignments. Cooperative rebalancing is particularly useful for workloads where minimizing processing disruption matters. Consumers must be configured with compatible assignment strategies when adopting cooperative behavior so that group members can participate correctly in the rebalance protocol.

Question 257

What does the Kafka consumer wakeup() method provide?

1. Partition creation
2. Offset compaction
3. Producer fencing
4. Poll interruption

Correct Answer: 4

Explanation:

The Kafka consumer wakeup() method allows another thread to interrupt a consumer that is blocked in a poll() operation. This is commonly used when an application needs to shut down a consumer cleanly. Calling wakeup() causes the blocked consumer operation to throw WakeupException, allowing application code to leave the polling loop and perform cleanup. The method does not create partitions, compact offsets, or fence producers. A controlled shutdown design can combine wakeup() with resource cleanup and consumer closing so that background polling threads terminate safely.

Question 258

Which consumer method finds offsets corresponding to timestamps?

1. position()
2. committed()
3. offsetsForTimes()
4. endOffsets()

Correct Answer: 3

Explanation:

The offsetsForTimes() consumer method retrieves offsets associated with specified timestamps for partitions. Applications can use this capability when they need to begin processing from a particular point in event time rather than simply starting from the earliest or latest available offset. For example, an application could locate offsets corresponding to records produced around a specific historical timestamp. position() reports the current consumer position, committed() retrieves committed positions, and endOffsets() returns the latest offsets. Timestamp-based offset lookup is useful for replay and time-oriented processing workflows.

Question 259

Which Kafka Streams setting controls stream-processing threads?

1. num.stream.threads
2. state.dir
3. application.id
4. commit.interval.ms

Correct Answer: 1

Explanation:

The num.stream.threads configuration determines how many stream-processing threads a Kafka Streams application uses within an instance. Increasing the number of threads can allow an instance to process more assigned tasks concurrently, depending on available partitions and system resources. It does not directly define the application’s state directory, application identifier, or commit interval. Effective thread sizing depends on workload characteristics, available CPU, partition counts, and the overall deployment architecture. Adding threads alone cannot create additional partition-level parallelism when the input topics do not provide enough partitions.

Question 260

What uniquely identifies a Kafka Streams application?

1. state.dir
2. application.id
3. num.stream.threads
4. processing.guarantee

Correct Answer: 2

Explanation:

The Kafka Streams application.id identifies a Streams application and is used in several important internal mechanisms. It contributes to the naming of internal topics and state stores and also identifies the application for consumer-group coordination. Applications that need independent processing state and group membership should use distinct application IDs. The state.dir setting specifies local state storage, while num.stream.threads controls processing concurrency. processing.guarantee determines processing semantics rather than application identity. Choosing a suitable application ID is therefore an important part of designing and operating Kafka Streams deployments.