How do SASL authentication and TLS encryption protect Kafka cluster communications, and what configuration options are typically used?

• A. TLS encrypts data in transit; SASL authenticates clients and brokers only for internal services; configure basic listeners.
• B. SASL authenticates clients and brokers; TLS is optional and not used.
• C. TLS encrypts data in transit and SASL provides authorization for topic creation only.
• D. SASL authenticates clients and brokers (e.g., PLAIN, SCRAM, GSSAPI); TLS encrypts in transit; configure listeners, inter.broker.protocol, security.inter.broker.protocol, ssl.keystore/truststore, and sasl.enabled.mechanisms.

Answer: (D)