Integration / Apache NiFi Interview Questions

How does NiFi handle security — TLS, authentication, and authorization?

NiFi provides a comprehensive security model covering transport encryption, user authentication, and fine-grained authorization.

TLS / Transport Encryption: NiFi can be configured to serve its UI and API exclusively over HTTPS. TLS is configured in nifi.properties using a keystore (server certificate) and truststore (CA certificates for client certificate validation). The tls-toolkit utility generates self-signed certificates and keystores for development clusters.

Authentication — NiFi supports multiple Login Identity Providers:

Client Certificate: Mutual TLS — the browser or API client presents a certificate. The Common Name (CN) becomes the NiFi identity.

LDAP / Active Directory: Username and password validated via LdapIdentityProvider.

Kerberos: Single sign-on via Kerberos ticket; the authenticated principal becomes the NiFi identity.

OIDC / OAuth2: Integration with Keycloak, Okta, or Azure AD via OpenID Connect.

Authorization: NiFi uses a policy-based model. Every resource (processor, connection, Process Group, provenance) has access policies — Read, Write, and Operate — that users or groups can be granted or denied. The authorizers.xml file configures the authorization provider. LDAP-based groups can be imported for group-level policy management.

Take quiz

When using client certificate authentication in NiFi, what becomes the user's identity?The certificate's serial number

✗ Try again — serial numbers are not user-friendly identities.

The Common Name (CN) from the client certificate's subject

✓ Well done — NiFi extracts the CN from the presented client certificate and uses it as the authenticated user identity.

The IP address of the client machine

✗ Try again — IP addresses are not used as NiFi identities.

What NiFi command-line utility helps generate TLS certificates and keystores for securing a NiFi cluster?nifi-admin

✗ Try again — there is no nifi-admin CLI tool for certificate generation.

tls-toolkit

✓ Well done — the NiFi tls-toolkit generates self-signed CAs, node certificates, keystores, and truststores for cluster TLS setup.

keytool

✗ Try again — keytool is a standard Java utility; tls-toolkit is the NiFi-specific wrapper that automates multi-node certificate generation.

More Related questions...

What is Apache NiFi and what problem does it solve? What is a FlowFile in Apache NiFi? What are the three NiFi repositories and what does each store? What is a Processor in Apache NiFi and what are the main processor categories? What is a Connection in NiFi and how does back-pressure work? What is NiFi Expression Language and where can it be used? What is data provenance in Apache NiFi and how do you access it? What is a Process Group in NiFi and why is it used? What is NiFi Registry and how does it integrate with NiFi? How does NiFi clustering work and what is the role of ZooKeeper? What is a Controller Service in NiFi and how is it different from a Processor? What is the GenerateTableFetch and QueryDatabaseTable pattern for incremental database ingestion? What is the Record-based processing model in NiFi and why is it preferred? What is State Management in NiFi and what types of state scope exist? What is NiFi Site-to-Site (S2S) and when do you use it? What is NiFi and how does it relate to Apache NiFi? What is NiFi Parameter Context and how does it differ from Variables? How does NiFi handle security — TLS, authentication, and authorization? What is the NiFi NAR (NiFi Archive) classloading model? What are Reporting Tasks in NiFi and what are common use cases? How do you handle errors and failures in a NiFi flow? What is the SplitText processor and how do you control split behavior? What is the MergeContent processor and how is it used? What is the InvokeHTTP processor and what are key configuration considerations? What is the PublishKafka and ConsumeKafka processor pair and what are key configuration options? What is the ExecuteScript processor and what scripting languages does it support? What is the JoltTransformJSON processor and how do you use it? What is the PutDatabaseRecord processor and how does it differ from ExecuteSQL? What is the ListSFTP and FetchSFTP processor pattern and how does it work? What is the LookupRecord processor used for? What is the PartitionRecord processor and what is a common use case? What is the ConvertRecord processor and how is it used for format conversion? What are the NiFi processor scheduling strategies? What is the difference between EvaluateJsonPath and FlattenJson processors? How does NiFi integrate with Apache Hadoop and HDFS? What is the UpdateAttribute processor and how is its Advanced Mode used? How do you implement deduplication in a NiFi flow? What is the HandleHttpRequest and HandleHttpResponse processor pair used for? How does NiFi achieve guaranteed delivery and what are its durability guarantees? What is the Funnel component in NiFi and when do you use it? What is the difference between GetFile and ListFile + FetchFile processors? How does NiFi support schema evolution in data pipelines? What is the RouteText processor and how does it differ from RouteOnContent? What performance tuning options are available in NiFi and what are common bottleneck patterns? How does NiFi integrate with cloud storage services like Amazon S3?

Show more question and Answers...

RabbitMQ Interview Questions

	Interviews Questions Java Spring Hibernate DevOps Testing API BigData Web Erlang AI Database Integration Cloud Python Scala Tools Golang SAP	About Javapedia.net Javapedia.net is for Java and J2EE developers, technologist and college students who prepare of interview. Also this site includes many practical examples. This site is developed using J2EE technologies by Steve Antony, a senior Developer/lead at one of the logistics based company. Follow Javapedia updates
	contact: javatutorials2016[at]gmail[dot]com
Kindly consider donating for maintaining this website. Thanks.
	Copyright © 2026, javapedia.net, all rights reserved. Privacy Policy · Terms of Service.

Integration / Apache NiFi Interview Questions

How does NiFi handle security — TLS, authentication, and authorization?

Comments & Discussions

Recently added questions