Question-12: Data Encryption at rest in HDFS is provided by

Question-12: Data Encryption at rest in HDFS is provided by

1. By Default, in CDP Private Cloud Base, HDFS has this feature enabled an no setup is needed.
2. It is provided by Encryption Keys and Encryption Policy
3. It is provided by SSL protocol.
4. It is provided by TLS protocol.

Answer:

Exp: IBM Spectrum Scale offers built-in encryption support and provides support for file encryption that ensures both secure storage and secure deletion of data. IBM Spectrum Scale manages encryption through the use of encryption keys and encryption policies. Secure storage uses encryption to make data unreadable to anyone who does not possess the necessary encryption keys. The data is encrypted while at rest (on disk) and is decrypted on the way to the reader. Only data, not metadata, is encrypted.  It is important to understand the difference between HDFS encryption and built-in encryption with IBM Spectrum Scale. HDFS level encryption is per user-based whereas built-in encryption is per node-based.

DFS encryption is supported starting in CDP Private ...