All Confluent exams

Free CCAC practice test: 30 questions with answers

30 original questions for Confluent Cloud Certified Operator (CCAC), drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.

Free questions
30
Full bank
112 questions
Real exam
90 min

CCAC exam guide: topics, cost and format

All 30 CCAC questions with answers

The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.

Multi-cloud and global Kafka architectures (6 questions)

  1. Question 1

    A bank runs its primary Kafka cluster in one cloud region and wants a standby cluster in a second cloud provider that can accept writes within minutes during a regional outage. Which design best meets this requirement?

    1. ARun a nightly script that exports topic contents to object storage and reloads them into a new cluster after an outage
    2. BHave every producer write to both clusters at the same time, with no replication between the two clusters
    3. CMirror the topics to the standby cluster with cluster linking, then fail over the mirror topics so they become writable
    4. DKeep only the primary cluster and have producers retry until the original region comes back online
    Show answer and explanation
    Correct answer: C

    Cluster linking keeps mirror topics on the standby cluster continuously synchronized, and failing them over makes them writable within minutes. The nightly export has a recovery point of up to a day, simultaneous dual writes create divergent copies, and waiting for the region to recover does not meet the requirement.

  2. Question 2

    Which statement best describes the main trade-off between an active-active multi-region Kafka design and an active-passive design?

    1. AActive-active lets both regions accept writes, but cross-region conflicts and ordering must be designed for
    2. BActive-passive lets both regions accept writes, which removes the need to design for conflicts across regions
    3. CActive-active needs no replication at all, because each region runs an independent copy of every topic
    4. DActive-passive can only run on a single cloud provider, so it cannot be used across two regions
    Show answer and explanation
    Correct answer: A

    Active-active allows each region to serve local writes, but it introduces conflicting updates and cross-region ordering questions that the application must handle. Active-passive sends writes to one region at a time, so it avoids most conflict handling. The other options are wrong because active-active still needs replication and active-passive is not limited to one cloud.

  3. Question 3

    A global software company stores EU customer events in a Kafka cluster in the EU. Its US analytics team needs only aggregated, non-personal summary topics, and the raw personal-data topics must never leave the EU. Which approach best meets both requirements?

    1. ACopy the raw personal-data topics to the US cluster nightly, then delete the copies after each analytics run
    2. BMirror every topic to the US cluster and rely on consumer ACLs to block US users from reading personal-data topics
    3. CLet the US analytics consumers connect to the EU cluster over the internet and read the raw topics directly
    4. DLink only the aggregated summary topics to the US cluster and keep the personal-data topics off the link
    Show answer and explanation
    Correct answer: D

    Replicating only the non-personal summary topics keeps personal data in the EU while still giving the US team what it needs. Mirroring everything moves personal data out of the EU even with ACLs in place, and direct cross-region reads or nightly copies also transfer the raw personal data.

  4. Question 4

    A topic with six partitions is replicated to a second region with cluster linking. A consumer in that region must process all events for one customer in the order they were produced. Which statement describes the ordering guarantee Kafka provides?

    1. AOrdering is kept within a partition only, so one customer's events must share a key that maps to one partition
    2. BOrdering is preserved between partitions, so events for one key can be interleaved when consumers read in parallel
    3. CThe destination cluster re-sorts replicated records by timestamp, so order is restored automatically for every key
    4. DOrdering is preserved across all partitions and regions, so the customer key does not affect the order of events
    Show answer and explanation
    Correct answer: A

    Kafka guarantees order only within a single partition, so events for one customer must use the same key and therefore land in the same partition. Replication does not add any global ordering across partitions or regions, and the destination does not re-sort records by timestamp.

  5. Question 5

    Which two statements about running Kafka across several clouds and regions are accurate? (Choose two.)

    1. AA mirror topic on the destination cluster accepts producer writes at all times, so no failover step is needed
    2. BReplicating a topic to a second region stores another full copy of its retained records in that region
    3. CCluster linking moves records between clusters without requiring a separate Kafka Connect worker cluster
    4. DActive-active replication guarantees a single global total order of all records across every region
    5. EPlacing producers far from their cluster always reduces end-to-end latency compared with local deployment
    Show answer and explanation
    Correct answer: B, C

    Replication stores a full copy of the retained data in each region, and cluster linking does not need Connect workers. Mirror topics are read-only until promoted, active-active setups do not give a global total order, and distance from the cluster increases latency rather than reducing it.

  6. Question 6

    A logistics company has sensor-producing warehouses in Singapore that write to a Kafka cluster in Virginia, which causes high producer latency. The central analytics team also works in Virginia and needs all sensor data. Which change best addresses the latency and keeps central analytics working?

    1. ARoute the Singapore producers through a VPN tunnel to the Virginia cluster to reduce packet loss
    2. BKeep the Virginia cluster and have Singapore warehouses buffer readings locally for a day before uploading
    3. CDeploy a Singapore cluster for the warehouse producers and use cluster linking to replicate topics to Virginia
    4. DReplace continuous sensor streaming with a monthly batch upload job so that the link latency no longer matters
    Show answer and explanation
    Correct answer: C

    A local cluster lets Singapore producers write with low latency, and cluster linking delivers the data to Virginia for analytics. A VPN does not remove the distance between the regions, local buffering delays data without fixing producer latency, and monthly batches discard the real-time sensor stream.

Cluster Linking (6 questions)

  1. Question 7

    Which statement about a mirror topic created by cluster linking is accurate?

    1. AA mirror topic can accept direct writes from local producers at any time, which is why it suits active-active designs
    2. BA mirror topic on the destination is read-only and follows the source until it is promoted to a regular writable topic
    3. CA mirror topic copies only recent records from the source and stops replicating older data that is still retained there
    4. DA mirror topic depends on a Kafka Connect source connector that must be recreated after every source broker restart
    Show answer and explanation
    Correct answer: B

    Mirror topics are read-only on the destination while they replicate from the source, and promoting one turns it into a regular writable topic. Mirror topics do not accept producer writes, do not copy only recent data, and do not rely on Kafka Connect source connectors.

  2. Question 8

    A team moved its order service to a Confluent Cloud cluster in another region by mirroring the orders topic with cluster linking. Consumers in the new region must resume from where the old region's consumers stopped and must not reprocess old events. What should the team configure?

    1. ASet auto.offset.reset to earliest on every consumer so that all records in the mirrored topic are read again
    2. BGive each consumer a new group ID so that offsets start at the latest position in the mirrored topic
    3. CEnable consumer offset synchronization on the cluster link so mirrored consumer offsets match the source
    4. DDelete the mirror topic and recreate it under a new name so that consumers begin at the end of the log
    Show answer and explanation
    Correct answer: C

    Consumer offset synchronization copies committed consumer group offsets from the source cluster, so consumers resume at the correct position. Resetting to earliest reprocesses events, while new group IDs or recreated topics skip or restart processing in the wrong place.

  3. Question 9

    During a regional outage of the source cluster, an operations team fails over the mirror topics on a standby cluster so that applications can write to them. What does failing over a mirror topic do?

    1. AIt stops replication from the source and turns the mirror into a regular, writable topic
    2. BIt converts the topic into a Flink table that can be queried, but it stays read-only for producers
    3. CIt deletes the source topic so that the two clusters cannot diverge while the outage lasts
    4. DIt re-encrypts all records with the destination's keys and restarts every consumer group from offset zero
    Show answer and explanation
    Correct answer: A

    Failover stops replication from the source immediately and turns the mirror into a regular, writable topic, without needing the source to be reachable. It does not delete the source topic, convert the topic into a Flink table, or reset consumer offsets.

  4. Question 10

    A company runs Confluent Platform in its own data center and wants a copy of selected topics in Confluent Cloud. The team does not want to run and patch a separate fleet of replicator Connect workers. Which option fits best?

    1. ABuild a Kafka Streams application that reads each record from the data center and produces it into the cloud cluster
    2. BUse cluster linking to create mirror topics on the Confluent Cloud cluster that pull from the data center cluster
    3. CExport the topics to CSV files every hour and import them into the cloud cluster with a scheduled script
    4. DRun Confluent Replicator on a dedicated Connect cluster in the data center for each topic that must be copied
    Show answer and explanation
    Correct answer: B

    Cluster linking creates mirror topics on the destination and replicates them without a separate Connect worker cluster. A custom Streams application or hourly CSV transfers add code to maintain or lose timeliness, and Replicator works but requires the Connect workers the team wants to avoid.

  5. Question 11

    In Confluent Cluster Linking, what does a cluster link represent?

    1. AA Schema Registry subject that keeps the same schema IDs in two clusters so that records decode in both
    2. BA Kafka Connect worker group that runs source connectors to copy topics from one cluster to another
    3. CA ksqlDB persistent query that transforms records as they are moved from one cluster to another cluster
    4. DA named, persistent connection and replication configuration between two clusters
    Show answer and explanation
    Correct answer: D

    A cluster link stores the connection and replication settings between a source and destination cluster, and mirror topics are created over it. It is not a Connect worker group, a ksqlDB query, or a Schema Registry subject.

  6. Question 12

    A team plans a migration of producers and consumers from cluster A to cluster B, keeping the same topic names and avoiding data loss. Before promoting the mirror topics on cluster B, what must be true?

    1. AThe source cluster has been deleted so the destination can take over its topic names without conflicts
    2. BEvery consumer group has been renamed so that its committed offsets start at zero on the new cluster
    3. CProducers have stopped writing to the source and the mirror topics have fully caught up with the source
    4. DThe schema IDs on cluster B have been reset to start at 1 so that they match the schema IDs on cluster A
    Show answer and explanation
    Correct answer: C

    A planned migration pauses writes on the source and waits until the mirror topics hold every source record, so promotion does not leave data behind. Deleting the source, renaming consumer groups, or resetting schema IDs are not part of this step.

Fully managed connectors (6 questions)

  1. Question 13

    A team needs to stream row-level changes from a PostgreSQL database into Confluent Cloud, and does not want to operate any Kafka Connect workers itself. Which option should the team choose?

    1. AA self-managed Debezium connector running on a Connect cluster that the team installs on its own virtual machines
    2. BA cron job that queries the database every minute and produces the new rows with a custom producer client
    3. CA Kafka Streams application that polls the source tables for new rows and writes each one to a topic
    4. DA fully managed PostgreSQL CDC Source connector that Confluent Cloud runs on its own managed infrastructure
    Show answer and explanation
    Correct answer: D

    The fully managed PostgreSQL CDC Source connector runs on Confluent-managed infrastructure, so the team does not operate Connect workers. The self-managed Debezium option needs the team to run workers, and polling approaches miss row-level changes such as deletes while adding operational work.

  2. Question 14

    What does the tasks.max setting control on a fully managed connector?

    1. AThe maximum size in bytes of each record that the connector is allowed to produce or consume
    2. BThe upper limit on how many tasks the connector can run in parallel, which caps its throughput
    3. CThe number of retries the connector makes for a failed record before it stops and reports an error
    4. DThe number of topics the connector is allowed to read from or write to within one environment
    Show answer and explanation
    Correct answer: B

    tasks.max sets the upper bound on parallel tasks, which determines how much of the connector's work can run at the same time. It does not limit record size, control retry behaviour, or restrict the number of topics the connector uses.

  3. Question 15

    A sink connector that loads records into a warehouse table occasionally receives records that do not match the target schema. The team wants the connector to keep running and set those records aside for later review. Which configuration fits best?

    1. ASet errors.tolerance to none so that the connector stops on each failure and restarts until the record is fixed
    2. BSet tasks.max to one so that the connector handles one record at a time and skips the records it cannot write
    3. CSet errors.tolerance to all and send failed records to a dead letter queue topic for later review
    4. DIncrease the offset flush interval so that records that fail are retried later from a larger buffer
    Show answer and explanation
    Correct answer: C

    Setting errors.tolerance to all lets the connector continue past bad records, and a dead letter queue keeps them for review. Changing tasks.max or the offset flush interval does not skip or store failed records, and stopping on every error halts the pipeline.

  4. Question 16

    Which practice is recommended for the credentials that a fully managed connector uses to reach a Kafka cluster?

    1. AReuse the cluster admin API key so that the connector never fails with a permission error
    2. BShare one API key across every connector in the environment so that a single rotation covers them all
    3. CStore the username and password in the topic names so that they are easy to find and rotate later
    4. DCreate a dedicated service account with only the permissions the connector needs, and use its API key
    Show answer and explanation
    Correct answer: D

    A dedicated service account with least-privilege permissions limits the damage from a leaked key and makes audits clear. Admin keys, shared keys, and credentials embedded in topic names expose more than the connector needs and are poor practice.

  5. Question 17

    A fully managed sink connector that writes to object storage is falling behind on a topic with 12 partitions, because it runs with only one task. The team wants more throughput without changing the topic. What should it do?

    1. ALower the topic's retention period so that the connector has less backlog to read through each hour
    2. BChange the connector's consumer group ID so that it begins reading from the earliest retained offset
    3. CIncrease tasks.max so that several tasks can each read a share of the 12 partitions in parallel
    4. DAdd partitions to the topic and keep tasks.max at one so that record ordering is not affected
    Show answer and explanation
    Correct answer: C

    A sink connector assigns topic partitions to its tasks, so raising tasks.max lets more of them read in parallel, up to the partition count. Retention changes, consumer group changes, or extra partitions with a single task do not raise throughput in this way.

  6. Question 18

    Which two statements about fully managed connectors in Confluent Cloud are accurate? (Choose two.)

    1. AConfluent operates the connector infrastructure, so the customer does not run or patch Connect worker nodes
    2. BEach connector's offsets are kept on the customer's local disk and are lost whenever the connector restarts
    3. CSource connector progress is stored in Kafka so that a restarted connector can resume from its last committed position
    4. DConnector settings are stored as versioned subjects in Schema Registry, which allows rollback to an earlier configuration
    5. EBefore any connector can be created in an environment, the customer must install the plugin jars on each worker
    Show answer and explanation
    Correct answer: A, C

    Fully managed connectors run on infrastructure that Confluent operates, and source connector progress is kept in Kafka so restarts resume correctly. Offsets are not kept on local disk, connector settings are not Schema Registry subjects, and customers do not install plugin jars on workers.

Stream Governance (6 questions)

  1. Question 19

    A producer team wants to add a new field named loyalty_tier to an Avro schema whose subject uses BACKWARD compatibility. Consumers must still be able to read both old and new records. Which change is compatible?

    1. AChange the data type of the existing amount field from int to string so that values can hold decimal text
    2. BRename the existing customer_id field to customerId and remove the old name without adding an alias
    3. CAdd loyalty_tier as a required field with no default, so that every new record must include it
    4. DAdd loyalty_tier with a default value, so a reader using the new schema can still decode older records
    Show answer and explanation
    Correct answer: D

    Under BACKWARD compatibility the new schema must read data written with the previous schema, so a new field needs a default value. A required field without a default, a type change, or a rename without an alias all break the reading of older records.

  2. Question 20

    How does a consumer that uses a Schema Registry-aware deserializer find the schema for a record it reads from a topic?

    1. AThe serializer copies the complete schema text into every message, so consumers never need to contact Schema Registry at all
    2. BThe serializer embeds a schema ID in each message, and the consumer fetches that schema from Schema Registry
    3. CThe consumer group stores the schema for each topic in its committed offsets, so it can decode older records without a lookup
    4. DThe broker keeps a separate copy of each schema for every partition, so consumers read the schema from the broker instead
    Show answer and explanation
    Correct answer: B

    Schema Registry-aware serializers put a schema ID in the message, and deserializers use that ID to retrieve and cache the schema. Copying full schema text into each record is not how the registry works, and neither consumer offsets nor broker storage hold schemas.

  3. Question 21

    A data governance team wants business users to search for topics, schemas and connectors across the organization, and to attach owner tags and descriptions to them. Which Stream Governance component provides this?

    1. AStream Lineage, which draws the producers, consumers and processing steps that connect topics to each other
    2. BStream Catalog, which indexes topics, schemas and connectors so teams can search them and attach tags
    3. CksqlDB, which runs continuous SQL queries that transform records from one topic and write them to another
    4. DSchema Registry, which stores schema versions and checks that new versions meet the configured compatibility rules
    Show answer and explanation
    Correct answer: B

    Stream Catalog indexes Kafka resources and supports search and business tagging. Lineage maps relationships, Schema Registry manages schema versions, and ksqlDB processes streams, so none of them is the catalog.

  4. Question 22

    An auditor asks which applications and connectors read from a topic that holds payment data, and which upstream jobs produce it. The team wants a visual map of these relationships in Confluent Cloud. Which tool provides this?

    1. AStream Lineage, which displays producers, consumers, connectors and processing jobs linked to each topic
    2. BCluster linking dashboards, which list the mirror topics created from the payment topic in each region
    3. CSchema Registry compatibility settings, which show each consumer group that has subscribed to the subject
    4. DConnector task logs, which record every record the connector moved for each partition during a run
    Show answer and explanation
    Correct answer: A

    Stream Lineage draws the graph of upstream and downstream relationships around topics, connectors and processing jobs. Compatibility settings, cluster link dashboards and task logs do not show that full map.

  5. Question 23

    A company runs two Schema Registry clusters, one in each region, and wants schemas registered in the primary registry to appear in the secondary without manual copying. Which Stream Governance feature addresses this?

    1. ASchema linking, which copies schemas and their versions from one Schema Registry to another
    2. BStream lineage, which rebuilds schema versions for each topic from the lineage graph of its producers
    3. CConsumer group offset sync, which moves the schema IDs along with the consumer offsets to the secondary
    4. DClient-side field level encryption, which keeps a separate, encrypted schema copy in each region
    Show answer and explanation
    Correct answer: A

    Schema linking synchronizes schemas and their versions between Schema Registry instances, so the secondary stays consistent. Lineage, consumer offset sync and client-side field level encryption do not copy schemas between registries.

  6. Question 24

    A data platform team wants producers and consumers of a topic to agree on more than field layout. Which combination describes a data contract in Stream Governance?

    1. AA Flink compute pool's capacity settings together with the names of the statements that run on it
    2. BA consumer group's committed offsets together with the retention settings of the topics it reads
    3. CA list of connectors allowed to write to a topic, together with their configured task counts
    4. DA schema together with metadata and data quality rules that producers and consumers agree to follow
    Show answer and explanation
    Correct answer: D

    A data contract pairs a schema with metadata and rules, so producers and consumers share the same expectations. Offsets, connector permissions and compute pool settings are operational details rather than the agreed data definition.

Stream processing (6 questions)

  1. Question 25

    An analyst needs the number of orders per customer in every five-minute interval, where the intervals never overlap and each event is counted in exactly one interval. Which window type should the stream processing job use?

    1. AA hopping window, which uses fixed-size intervals that advance by a smaller step so that they overlap
    2. BA tumbling window, which uses fixed-size, non-overlapping intervals so each event falls into one window
    3. CA global window, which keeps all events for a key in one unbounded group until a custom trigger fires
    4. DA session window, which groups the events of each key that are separated by less than a chosen inactivity gap
    Show answer and explanation
    Correct answer: B

    A tumbling window uses fixed, non-overlapping intervals, so each event belongs to exactly one window. Hopping windows overlap, session windows depend on inactivity gaps rather than fixed intervals, and global windows do not split events by time.

  2. Question 26

    A Flink job computes counts by event time, and some events arrive late from mobile devices. Why does the job rely on watermarks?

    1. AWatermarks track how far event time has progressed, so windows can close while still allowing for some late events
    2. BWatermarks encrypt each record before it is written to the output topic so that late events cannot be read by others
    3. CWatermarks set how many partitions the job creates for its output topic when the job starts up
    4. DWatermarks store consumer offsets so that a restarted job can skip records it has already committed
    Show answer and explanation
    Correct answer: A

    A watermark is the engine's estimate of event-time progress, and it is used to decide when a window can close. Watermarks do not encrypt records, choose partition counts, or store consumer offsets.

  3. Question 27

    A Flink job keeps a running count per customer in its state. After a worker fails, the team must resume the count without double counting events. Which mechanism restores the state?

    1. APeriodic checkpoints of operator state and source positions, restoring from the last completed checkpoint
    2. BA full copy of the output topic that the job rereads from the first offset to rebuild every customer's count
    3. CThe Schema Registry, which stores the latest count for each customer as a separate schema version
    4. DA new consumer group ID, which makes the job start counting from zero after every worker failure
    Show answer and explanation
    Correct answer: A

    Flink checkpoints capture operator state and source positions consistently, so after a failure the job restarts from the last completed checkpoint without double counting. Rebuilding from the output topic, storing counts in Schema Registry, or starting from zero with a new group ID do not restore state correctly.

  4. Question 28

    A developer models customer address changes as a stream in ksqlDB and as a table in a different query. Which description matches the difference between a stream and a table?

    1. AA stream holds only the latest value per key, while a table keeps every event in arrival order
    2. BA stream and a table are the same structure, and the only difference is the number of partitions each one uses
    3. CA table is a Schema Registry subject, while a stream is a Kafka topic that stores the schema for each record
    4. DA stream is an append-only sequence of events, while a table holds the latest value for each key
    Show answer and explanation
    Correct answer: D

    A stream records each event as a new row, and a table represents current state by keeping the latest value per key. The options that reverse these meanings, or confuse them with partition counts or schema subjects, are wrong.

  5. Question 29

    Which two statements about stream processing in Confluent Cloud are accurate? (Choose two.)

    1. AFlink SQL statements run on compute pools, which provide bounded capacity that statements share
    2. BA hopping window whose slide equals its size assigns each event to several overlapping windows
    3. CA ksqlDB pull query returns a result from current state and finishes, rather than writing to a topic continuously
    4. DFlink jobs cannot use event time, because event time requires a Schema Registry subject for each record
    5. EA session window always closes after a fixed number of records, regardless of the gaps between events
    Show answer and explanation
    Correct answer: A, C

    Flink statements run on compute pools with bounded capacity, and ksqlDB pull queries return current state and end. A hopping window whose slide equals its size is the same as a tumbling window, so each event lands in one window; Flink supports event time without Schema Registry, and session windows close on inactivity gaps rather than record counts.

  6. Question 30

    A Flink job counts events per device. To keep each device's state in one place, the job partitions the stream by device ID before the aggregation. What is this step called?

    1. AKeying the stream, which sends all events with the same key to the same parallel task instance
    2. BBroadcasting the stream, which copies every event to every parallel task instance in the job
    3. CWindowing the stream, which groups events by their arrival time into fixed intervals
    4. DMaterializing the stream, which writes every event into a Schema Registry subject
    Show answer and explanation
    Correct answer: A

    Keying routes all events with the same key to one parallel instance, so that instance holds the state for that key. Broadcasting copies events everywhere, windowing groups by time, and materializing writes to a subject, none of which partitions state by key.