Question bank
CDP Administrator - Private Cloud Base
41 CDP Administrator - Private Cloud Base questions with the correct answer and a written explanation, organised across 6 exam domains.
- 41 questions
- 6 domains
- Foundation level
Question index
Jump straight to any question. Answers and explanations are inline.
- Administration · 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
- Backup and Disaster Recovery · 12, 13, 14, 15
- Installation and Configuration · 16, 17, 18, 19, 20, 21, 22, 23
- Monitoring and Logging · 24, 25, 26, 27, 28, 29
- Security and Access Control · 30, 31, 32, 33, 34, 35, 36, 37
- Troubleshooting and Optimization · 38, 39, 40, 41
Administration
11 questions in this domain
- Question 1Single Choice
What is the primary resource negotiation component in CDP Private Cloud Base?
- AYARNCorrect answer
- BHDFS
- CMapReduce
- DCloudera Manager
Why this is the answer
YARN is the resource negotiator that manages container allocation across the cluster.
- Question 2Multiple Select
Which two methods can be used to define resource pools in CDP Private Cloud Base?
- Afair-scheduler.xmlCorrect answer
- Bcapacity-scheduler.xmlCorrect answer
- Chdfs-site.xml
- Dyarn-site.xml
Why this is the answer
Fair Scheduler uses fair-scheduler.xml; Capacity Scheduler uses capacity-scheduler.xml.
- Question 3Interactive
In the YARN configuration snippet, which setting enables hard memory limits for containers?
- Ayarn.nodemanager.linux-container-executor.cgroups.memory.enabledCorrect answer
- Byarn.scheduler.maximum-allocation-mb
- Cyarn.nodemanager.resource.memory-mb
- Dyarn.app.mapreduce.am.resource.mb
Why this is the answer
The property enables cgroups-based memory limits, preventing OOM kills.
- Question 4Single Choice
What is the default HDFS block size in CDP Private Cloud Base?
- A128 MBCorrect answer
- B64 MB
- C256 MB
- D512 MB
Why this is the answer
The default HDFS block size is 128 MB, configurable via dfs.blocksize.
- Question 5Multiple Select
Which two mechanisms does YARN provide to isolate resources at the kernel level?
- ACPU sharesCorrect answer
- BMemory limitsCorrect answer
- CDisk I/O rate
- DNetwork bandwidth
Why this is the answer
cgroups provide CPU shares and memory limits for YARN container isolation.
- Question 6Interactive
In the fair-scheduler.xml snippet, what does the <minResources> element define?
- AGuaranteed minimum resources for the poolCorrect answer
- BMaximum allowed resources for the pool
- CCurrent resource usage
- DPreemption threshold
Why this is the answer
<minResources> ensures the pool receives at least that amount under contention.
- Question 7Single Choice
Which built-in Cloudera Manager role can start and stop services but not change configurations?
- AOperatorCorrect answer
- BFull Administrator
- CLimited Administrator
- DRead-Only
Why this is the answer
The Operator role can start/stop services and view dashboards but cannot modify configurations.
- Question 8Multiple Select
Which two features are enforced by Cloudera Manager for internal users?
- APassword complexityCorrect answer
- BPassword expirationCorrect answer
- CAccount lockout
- DMulti-factor authentication
Why this is the answer
CM enforces password complexity and expiration for internal users; lockout is configurable but not default.
- Question 9Interactive
In the Cloudera Manager ACL property, what permission allows a user to submit jobs to a pool?
- Asubmit-aclCorrect answer
- Badmin-acl
- Cview-acl
- Dmanage-acl
Why this is the answer
submit-acl allows users to submit jobs to that YARN resource pool.
- Question 10Single Choice
What is the process called when a host is gracefully removed from a CDP cluster?
- ADecommissioningCorrect answer
- BRemoving
- CDeleting
- DUnassigning
Why this is the answer
Decommissioning moves roles off the host and ensures data replication before removal.
- Question 11Multiple Select
Which two services support rolling upgrades in CDP Private Cloud Base?
- AHDFSCorrect answer
- BYARNCorrect answer
- CZooKeeper
- DHBase
Why this is the answer
HDFS and YARN support rolling upgrades; ZooKeeper and HBase require full restarts.
Backup and Disaster Recovery
4 questions in this domain
- Question 12Single Choice
What is the most critical component of a Cloudera Manager backup?
- AThe Cloudera Manager Server databaseCorrect answer
- BThe parcel cache on each host
- CThe /etc/hosts file
- DThe root HDFS directory
Why this is the answer
The Cloudera Manager Server database stores all cluster metadata; without it, the cluster cannot be restored.
- Question 13Multiple Select
Which components are included in the backup created by the cloudera-manager-backup script?
- AA database dump of the CM Server databaseCorrect answer
- BThe Cloudera Manager Server configuration directoryCorrect answer
- CAgent configuration filesCorrect answer
- DDeployment descriptor JSON filesCorrect answer
Why this is the answer
The script bundles the database dump, server config, agent configs, and deployment descriptors into a tarball.
- Question 14Interactive
Which flag creates a full backup using the cloudera-manager-backup script?
- A--fullCorrect answer
- B--incremental
- C--complete
- D--all
Why this is the answer
The --full flag tells the script to create a complete backup of the database and all configuration files.
- Question 15Single Choice
Do incremental backups depend on a preceding full backup?
- AYes, the full backup must be restored firstCorrect answer
- BNo, incremental backups are independent
- COnly if the full backup is older than 7 days
- DNo, they depend on the last incremental only
Why this is the answer
Incremental backups capture changes since the last full backup; without the full backup, the base state is missing.
Installation and Configuration
8 questions in this domain
- Question 16Single Choice
What is the recommended value for the kernel parameter vm.swappiness on CDP Private Cloud Base data nodes?
- A0
- B1Correct answer
- C60
- D100
Why this is the answer
Cloudera recommends setting vm.swappiness to 1 to minimize swapping and improve HDFS performance on data nodes.
- Question 17Multiple Select
Which storage practices are recommended by Cloudera for CDP Private Cloud Base? (Select all that apply)
- AUse JBOD (Just a Bunch of Disks) for HDFS data disksCorrect answer
- BUse RAID 10 for data disks to improve performance
- CMount data disks with the noatime optionCorrect answer
- DPlace /var/log on the root partition without separate volume
Why this is the answer
JBOD and noatime mounts are recommended. RAID adds complexity and is not needed because HDFS provides redundancy.
- Question 18Interactive
Based on the command in the code block, which OS parameter is being configured?
- Avm.swappinessCorrect answer
- Bvm.max_map_count
- Cnet.core.somaxconn
- Dtransparent_hugepage
Why this is the answer
The command sets vm.swappiness to 1, which is the recommended value for CDP data nodes.
- Question 19Single Choice
What distribution mechanism does Cloudera use for CDP service binaries?
- ARPM packages
- BParcelsCorrect answer
- CDEB packages
- DContainer images
Why this is the answer
Cloudera uses self-contained parcels (tarballs) to distribute CDP services, allowing version switching without OS package conflicts.
- Question 20Multiple Select
Which of the following are prerequisites that must be fulfilled before installing CDP Private Cloud Base? (Select all that apply)
- AConfigure DNS with forward and reverse hostname resolutionCorrect answer
- BSynchronize clocks across all nodes using NTPCorrect answer
- CSet SELinux to permissive mode or disable itCorrect answer
- DInstall Cloudera Manager Server on every node
Why this is the answer
DNS, NTP, and disabling SELinux (or permissive) are prerequisites. CM Server is installed on only one host, not all nodes.
- Question 21Interactive
The command in the code block is used to perform which action?
- AStart the Cloudera Manager ServerCorrect answer
- BStart the Cloudera Manager Agent
- CRestart all cluster services
- DInitialize the Cloudera Manager database
Why this is the answer
The command `systemctl start cloudera-scm-server` launches the Cloudera Manager Server service.
- Question 22Single Choice
What is the default port for accessing the Cloudera Manager web interface over HTTP?
- A7180Correct answer
- B7182
- C7183
- D9090
Why this is the answer
Port 7180 is the default HTTP port for Cloudera Manager. Port 7182 is for agent communication and 7183 for HTTPS.
- Question 23Multiple Select
Which statements correctly describe Cloudera parcel repositories? (Select all that apply)
- AThey are managed through the Cloudera Manager Admin ConsoleCorrect answer
- BThey are independent of the operating system's package repositoriesCorrect answer
- CThey can be mirrored to a local web server for offline environmentsCorrect answer
- DThey use RPM or DEB packages for distribution
Why this is the answer
Parcel repositories are managed in CM, separate from OS repos, and can be mirrored. They distribute parcels, not RPM/DEB.
Monitoring and Logging
6 questions in this domain
- Question 24Single Choice
What are the four severity levels for alerts in Cloudera Manager?
- ACritical, Warning, Informational, UnknownCorrect answer
- BCritical, High, Medium, Low
- CFatal, Error, Warn, Info
- DEmergency, Alert, Critical, Error
Why this is the answer
Cloudera Manager defines Critical, Warning, Informational, and Unknown severity levels for alerts.
- Question 25Multiple Select
Which notification channels are supported for Cloudera Manager alerts?
- AEmailCorrect answer
- BSNMP trapsCorrect answer
- CCustom webhooksCorrect answer
- DJMS queues
Why this is the answer
Cloudera Manager supports email, SNMP traps, and custom webhooks for alert notifications.
- Question 26Interactive
Examine the log4j configuration snippet for HDFS. What log level is set for the HDFS audit logger?
- AINFOCorrect answer
- BDEBUG
- CWARN
- DERROR
Why this is the answer
The snippet `log4j.logger.org.apache.hadoop.hdfs.server.namenode.AuditLogger=INFO,RFAAUDIT` sets the level to INFO.
- Question 27Single Choice
What is the default retention period for raw metric data in Cloudera Manager?
- A31 daysCorrect answer
- B7 days
- C90 days
- D180 days
Why this is the answer
Cloudera Manager retains raw metric data for 31 days by default.
- Question 28Multiple Select
Which of the following are categories of health checks in Cloudera Manager?
- AHost healthCorrect answer
- BRole healthCorrect answer
- CService healthCorrect answer
- DCluster healthCorrect answer
Why this is the answer
Cloudera Manager monitors health at host, role, service, and cluster levels.
- Question 29Interactive
Given this Prometheus scrape configuration, what port does the Cloudera Manager Prometheus adapter use?
- A7190Correct answer
- B7180
- C8080
- D9090
Why this is the answer
The Prometheus adapter listens on port 7190 by default, as shown in the target.
Security and Access Control
8 questions in this domain
- Question 30Single Choice
Which authentication mechanism is mandatory for secure CDP Private Cloud Base clusters?
- AKerberosCorrect answer
- BLDAP
- CSAML
- DRADIUS
Why this is the answer
Kerberos is mandatory for secure CDP clusters because Hadoop services rely on it for mutual authentication.
- Question 31Multiple Select
Which two mechanisms are used for authentication in CDP Private Cloud Base? (Choose two.)
- AKerberosCorrect answer
- BLDAPCorrect answer
- CRADIUS
- DSAML
Why this is the answer
The two primary mechanisms are Kerberos for strong authentication and LDAP as an identity repository.
- Question 32Interactive
Complete the command to create a Kerberos principal for the HDFS service on node1.example.com in realm EXAMPLE.COM.
- Ahdfs/node1.example.com@EXAMPLE.COMCorrect answer
- Bnode1.example.com/hdfs@EXAMPLE.COM
- CHDFS/node1.example.com@EXAMPLE.COM
- Dhn/node1.example.com@EXAMPLE.COM
Why this is the answer
Service principals are formatted as service/fully.qualified.domain@REALM, e.g., hdfs/node1.example.com@EXAMPLE.COM.
- Question 33Single Choice
What is the default port for Cloudera Manager Agent non-secure communication?
- A7182Correct answer
- B7180
- C7184
- D7183
Why this is the answer
The default non-secure port for Cloudera Manager Agent is 7182; secure is 7184.
- Question 34Multiple Select
Which two services provide centralized authorization in CDP Private Cloud Base? (Choose two.)
- AApache SentryCorrect answer
- BApache RangerCorrect answer
- CApache Knox
- DApache Atlas
Why this is the answer
CDP supports both Apache Sentry (legacy) and Apache Ranger (recommended) for authorization.
- Question 35Interactive
Complete the statement: Apache Ranger stores audit logs in ____ by default.
- ASolrCorrect answer
- BHDFS
- CMySQL
- DKafka
Why this is the answer
Ranger audit logs are stored in Apache Solr by default; they can be exported to HDFS.
- Question 36Single Choice
What does HDFS Transparent Encryption protect?
- AData at restCorrect answer
- BData in transit
- CData in use
- DData in memory
Why this is the answer
HDFS Transparent Encryption encrypts data at rest (on disk) at the file system level.
- Question 37Multiple Select
Which two components are required for HDFS Transparent Encryption? (Choose two.)
- AKey Management Server (KMS)Correct answer
- BEncryption zoneCorrect answer
- CApache Ranger
- DApache Atlas
Why this is the answer
HTE requires a KMS to manage keys and an encryption zone in HDFS to apply encryption.
Troubleshooting and Optimization
4 questions in this domain
- Question 38Single Choice
What is the first step in diagnosing a common cluster issue according to Cloudera best practices?
- ARestart the service immediately
- BCheck Cloudera Manager health and eventsCorrect answer
- CRun hdfs fsck /
- DCheck system logs on each node
Why this is the answer
The logical workflow starts with identifying the symptom and gathering evidence from Cloudera Manager health and events before deeper analysis.
- Question 39Multiple Select
Which of the following are common troubleshooting traps? (Select two)
- ARestarting the service as the first actionCorrect answer
- BAlways checking system logs first
- CIgnoring Cloudera Manager event historyCorrect answer
- DUsing Cloudera Manager for all diagnostics
Why this is the answer
Restarting destroys evidence; ignoring event history loses context. Both are listed as common traps in the playbook.
- Question 40Interactive
Examine the following HDFS fsck output. Which issue does it indicate?
- ANameNode is in safe mode
- BDataNode heartbeat lost
- CBlock corruption or missing blocksCorrect answer
- DDisk space is full
Why this is the answer
Missing blocks indicate data corruption or unreplicated blocks, a common HDFS issue.
- Question 41Single Choice
What does the YARN parameter maximum-am-resource-percent control?
- AMaximum memory for application mastersCorrect answer
- BMaximum CPU for all containers
- CMaximum queue capacity
- DMaximum number of applications
Why this is the answer
It limits the percentage of total YARN memory allocated to application masters, as outlined in the playbook.
Frequently asked questions
Everything about the CDP Administrator - Private Cloud Base question bank and how to use it.