Databricks Data Engineer Associate Question 470
Select 3You are tasked with implementing data governance in your Databricks workspace. The organization requires that sensitive data stored in Delta tables be accessed only by specific users and that all access requests and changes to the data be tracked for audit purposes. Which of the following features should you use to achieve this?
- A
Unity Catalog to manage permissions and enforce role-based access control
- B
Enable Delta Lake's change data feed (CDF) to track all changes to the data
- C
Use Delta Lake's audit logs to monitor access and modifications
- D
Implement table ACLs (Access Control Lists) to restrict access to sensitive data
- E
Configure Databricks SQL to enable SQL-based access control
Show answer and explanation
Correct answers: A, C, D
Explanation
To implement data governance in Databricks for sensitive data, you should use Unity Catalog for centralized access control, table ACLs to enforce restrictions on specific tables, and Delta Lake's audit logs to track access and modifications for auditing purposes. Together, these features meet the requirements for both access restrictions and auditing, while other options like change data feed or Databricks SQL do not fully address the governance needs.
- A. Correct.
Unity Catalog provides centralized governance tools such as role-based access control (RBAC), allowing you to control user access at a granular level and enforce data governance policies. This is essential for managing sensitive data.
- B. Incorrect.
Delta Lake's change data feed (CDF) is used for capturing changes to a Delta table but does not inherently provide audit logs or access control, so it is not relevant to meeting the governance requirements described.
- C. Correct.
Delta Lake's audit logs can be used to track access and modifications to the data, which is important for meeting the audit requirements of the scenario.
- D. Correct.
Table ACLs (Access Control Lists) allow fine-grained control over access to Delta tables, making them an appropriate choice for restricting access to sensitive data.
- E. Incorrect.
Configuring Databricks SQL for SQL-based access control is possible but does not provide the comprehensive data governance capabilities required, such as centralized policies or audit logs.