How do SASL authentication and TLS encryption protect Kafka cluster communications, and what configuration options are typically used?

How do SASL authentication and TLS encryption protect Kafka cluster communications, and what configuration options are typically used?

• A. TLS encrypts data in transit; SASL authenticates clients and brokers only for internal services; configure basic listeners.
• B. SASL authenticates clients and brokers; TLS is optional and not used.
• C. TLS encrypts data in transit and SASL provides authorization for topic creation only.
• D. SASL authenticates clients and brokers (e.g., PLAIN, SCRAM, GSSAPI); TLS encrypts in transit; configure listeners, inter.broker.protocol, security.inter.broker.protocol, ssl.keystore/truststore, and sasl.enabled.mechanisms.

Answer: (D)