Databricks Data Engineer Associate Question 524
Single answerYou are tasked with setting up a secure connection between Databricks and an external data source. Your organization mandates that no personal user credentials should be used for authentication and access must follow the principle of least privilege. Which of the following is the most appropriate solution to meet these requirements?
- A
Use service principals to authenticate and manage access to the external data source.
- B
Use a shared user account with broad access permissions to connect to the external data source.
- C
Use personal user credentials for authentication to ensure traceability and accountability.
- D
Use an API key generated from a personal developer account to establish the connection.
Show answer and explanation
Correct answer: A
Explanation
Service principals are the recommended approach for secure authentication in Databricks when connecting to external resources. They allow for granular access control, are not tied to individual users, and ensure compliance with organizational security policies such as the principle of least privilege.
- A. Correct.
Using service principals is considered a best practice for secure connections. They are non-human identities that can be assigned specific permissions, ensuring compliance with the principle of least privilege.
- B. Incorrect.
Using a shared user account violates best practices because it is not secure and does not adhere to the principle of least privilege. Shared accounts also make auditing and accountability difficult.
- C. Incorrect.
Using personal user credentials is not recommended for system-to-system communication since they are tied to individual users and can lead to issues with scalability, compliance, and security.
- D. Incorrect.
Using an API key from a personal developer account is insecure and violates organizational security standards. It is not suitable for enterprise-grade connections requiring proper identity and role management.