Databricks Data Engineer Professional Question 200
Select 2You are managing a Databricks workspace for a financial institution and need to ensure compliance with regulatory requirements for data access and auditing. Which of the following actions will help you enforce security and governance best practices in Databricks?
- A
Enable cluster-level isolation by setting up High Concurrency Clusters with Table ACLs.
- B
Configure Unity Catalog to manage data access policies and perform auditing across workspaces.
- C
Use Databricks SQL to disable audit logging for sensitive queries to reduce storage costs.
- D
Implement credential passthrough for secure access to cloud storage without storing credentials in Databricks.
- E
Use the default workspace storage configurations for all users to simplify access control.
Show answer and explanation
Correct answers: B, D
Explanation
To ensure compliance with security and governance best practices, Unity Catalog provides centralized access control and auditing capabilities across Databricks workspaces. Credential passthrough enhances security by avoiding the storage of sensitive credentials in Databricks. These actions collectively address key regulatory requirements for secure data access and traceability.
- A. Incorrect.
High Concurrency Clusters with Table ACLs can provide fine-grained access control, but they are not sufficient alone for ensuring complete security and governance. Unity Catalog is more comprehensive for managing data access and governance.
- B. Correct.
Unity Catalog is designed to enforce access controls, define data governance policies, and provide auditing features across Databricks workspaces, making it a key component for compliance in regulated industries.
- C. Incorrect.
Disabling audit logging would violate compliance and security best practices as it increases the risk of untraceable actions, which is not acceptable in a regulated environment.
- D. Correct.
Credential passthrough ensures that users access cloud storage securely via their own identities, without exposing sensitive credentials in Databricks, aligning with security best practices.
- E. Incorrect.
Using default storage configurations does not provide granular access control or governance capabilities. Instead, it can lead to potential security risks by failing to enforce proper restrictions.