Databricks Data Engineer Professional Question 203
Select 2A data engineering team is tasked with setting up access control for a Databricks environment to ensure that only specific users can access and modify production data. They also need to ensure that audit logs are captured for compliance purposes. Which combination of actions should the team take to achieve these requirements?
- A
Enable cluster-level access control and assign users to appropriate groups based on their roles.
- B
Configure Table Access Control (TAC) and assign permissions using Databricks SQL grants.
- C
Set up an external logging destination to capture Databricks audit logs for long-term storage.
- D
Disable Personal Access Tokens (PATs) for all users to enhance security.
- E
Configure Databricks Repos to enforce version control on production data.
Show answer and explanation
Correct answers: B, C
Explanation
To ensure proper access control, the team should use Table Access Control (TAC) to define permissions for production data. Additionally, configuring an external logging destination for audit logs satisfies the compliance requirement. Other options, while useful for security or workflow management, do not directly fulfill the requirements specified in the scenario.
- A. Incorrect.
Cluster-level access control manages who can use specific clusters but does not directly address data access control or audit logging, which are the requirements in this scenario.
- B. Correct.
Table Access Control (TAC) allows fine-grained permissions on tables and views, ensuring that only authorized users can access production data, making it essential for meeting the access control requirement.
- C. Correct.
Setting up an external logging destination ensures that audit logs are captured and stored securely for compliance purposes, addressing the requirement for audit logging.
- D. Incorrect.
Disabling Personal Access Tokens (PATs) can enhance security, but it is not directly related to the requirements of data access control or audit logging in this scenario.
- E. Incorrect.
Configuring Databricks Repos enforces version control but does not address data access control or audit logging requirements.