Databricks Data Engineer Professional Question 201
Select 3You are configuring a Databricks workspace for a financial services company that requires fine-grained access control to meet regulatory compliance. The organization wants to ensure that sensitive data is only accessible to authorized users and that all access is auditable. Which of the following configurations and features should you implement to meet these requirements?
- A
Enable Unity Catalog and configure table permissions using attribute-based access control (ABAC).
- B
Use cluster-scoped access control to restrict access to sensitive clusters.
- C
Configure data masking policies in Unity Catalog to obfuscate sensitive data for unauthorized users.
- D
Rely on workspace-level access controls only, as they provide sufficient security for sensitive data.
- E
Enable audit logs in Unity Catalog to track data access and modifications.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet regulatory compliance for fine-grained access control and auditability, you should implement Unity Catalog, which supports granular data permissions through ABAC and data masking. Additionally, enabling audit logs ensures that all access and modifications to sensitive data are tracked. Workspace-level and cluster-scoped access controls alone are not sufficient to fulfill these requirements.
- A. Correct.
Correct: Unity Catalog provides fine-grained access control at the table, column, and row levels. Attribute-based access control (ABAC) is an advanced feature that enables dynamic access control based on user attributes.
- B. Incorrect.
Incorrect: Cluster-scoped access control restricts who can access and manage clusters but does not address fine-grained data access requirements for regulatory compliance.
- C. Correct.
Correct: Data masking in Unity Catalog allows sensitive data to be obfuscated for users without proper permissions, meeting the requirement for securing sensitive data.
- D. Incorrect.
Incorrect: Relying solely on workspace-level access controls is insufficient for regulatory compliance, as these controls do not provide the necessary granularity for data access management.
- E. Correct.
Correct: Enabling audit logs in Unity Catalog allows tracking of data access and modifications, ensuring compliance with regulatory requirements for auditable access.