When does class start/end?
Classes begin promptly at 9:00 am, and typically end at 5:00 pm.
This course, which is offered exclusively through OnDemand, introduces experienced system administrators to some of the tools and techniques that Cloudera’s Solution Architects use to protect the clusters that our customers rely on for essential business operations.
Skills Gained
- Describe security in the context of Hadoop
- Assess threats to a production Hadoop cluster
- Plan and deploy defenses against these threats
- Improve the security of each node in the cluster
- Set up authentication with Kerberos and Active Directory
- Use permissions and ACLs to control access to files in HDFS
- Use Apache Sentry to control data access
- Perform common key management tasks
- Use encryption to protect data in motion and at rest
- Monitor a cluster for suspicious activity
- Understand additional security considerations, including data governance and disaster recovery
Prerequisites
The course is intended for system administrators and those in similar roles. Prospective students should have a good understanding of Hadoop's architecture, the ability to perform system administration tasks in the Linux environment, and at least basic exposure to Cloudera Manager. We recommend that students complete the Cloudera Administrator Training for Apache Hadoop course, or have equivalent on-the-job experience, before beginning this course. No prior training or experience with computer security is required.
Course Details
Security Overview
- What Is Security?
- The Need for Security
- Key Principles
- Threat Assessment
- Risk Management
Security Architecture
- Scenario Explanation
- Assessing Cluster Security
Host Security
- General Server Hardening
- Recommendations
- System Entropy
- Access Control
- Host Firewalls
- Host-Level Monitoring
Encrypting Data In Motion
- Encryption Fundamentals
- Certificates
- Configuring Cloudera Manager for TLS
Authentication
- Hadoop Authentication Fundamentals
- Kerberos
- Active Directory
- Browser-Based Authentication
- Encrypting Hadoop Data in Motion
Authorization
- Authorization Mechanisms
- Cloudera Manager Authorization
- YARN Authorization
- HDFS Authorization
- Apache Sentry
Encrypting Data at Rest
- Overview of HDFS Encryption
- Encrypting Data Outside of HDFS
- Hardware Security Modules
Additional Considerations
- Auditing
- Data Governance and Lineage Business Continuity and Disaster
- Recovery
Conclusion
Does the course schedule include a Lunchbreak?
Lunch is normally an hour long and begins at noon. Coffee, tea, hot chocolate and juice are available all day in the kitchen. Fruit, muffins and bagels are served each morning. There are numerous restaurants near each of our centers, and some popular ones are indicated on the Area Map in the Student Welcome Handbooks - these can be picked up in the lobby or requested from one of our ExitCertified staff.
How can someone reach me during class?
If someone should need to contact you while you are in class, please have them call the center telephone number and leave a message with the receptionist.
What languages are used to deliver training?
Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.
What does GTR stand for?
GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.
How do I find an ExitCertified training location?
We have training locations across the United States and Canada. View a full list of classroom training locations.
Which delivery formats are available?
At ExitCertified we offer training that is Instructor-Led, Online, Virtual and Self-Paced.
Does ExitCertified deliver group training?
Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.
Does ExitCertified deliver group training?
Yes, we provide training for groups, individuals, and private on sites. View our group training page for more information.
Very good material, the instructor was clear explaining the topics, and the labs were easy to follow it.
Great class I learned a great deal from the material. There would seem to a large amount that I need to learn about.
Class was easy to sign up for and ExitCertified provided very good communication
Good training material and good instruction. More time needs to be provided for the lab work.
Great company -- easy to sign up and very organized. Loved my teacher and class overall.
