Databricks Data Engineer Professional Question 204
Select 3A data engineering team is tasked with securing access to sensitive data stored in Delta tables. They need to ensure that only specific groups of users can read or write to the data while maintaining compliance with privacy regulations. Which of the following steps should the team take to implement secure access control in Databricks?
- A
Configure table-level access permissions using Unity Catalog
- B
Use Databricks secrets to store credentials and share them with all users
- C
Set up fine-grained access control for Delta tables via SQL GRANT statements in Unity Catalog
- D
Assign workspace-wide admin permissions to all team members to simplify access management
- E
Enable column-level security to restrict access to sensitive columns in the Delta table
Show answer and explanation
Correct answers: A, C, E
Explanation
To secure access to sensitive data in Delta tables, the team should leverage Unity Catalog for table-level and column-level access controls, as well as use GRANT statements to define fine-grained permissions. These approaches ensure compliance with privacy regulations and follow best practices for data security, such as the principle of least privilege. Databricks secrets can be used for credential management but should not be shared broadly, and assigning admin permissions to all users poses significant security risks.
- A. Correct.
Correct. Unity Catalog provides table-level access controls, allowing you to define permissions for specific user groups or roles.
- B. Incorrect.
Incorrect. While Databricks secrets are useful for managing sensitive credentials, sharing them with all users compromises security and does not directly provide data access control.
- C. Correct.
Correct. Unity Catalog supports fine-grained access control via SQL GRANT statements, enabling precise control over who can access or modify data.
- D. Incorrect.
Incorrect. Assigning workspace-wide admin permissions to all team members is not a secure practice and violates the principle of least privilege.
- E. Correct.
Correct. Column-level security is a feature that allows you to restrict access to specific columns within a Delta table, ensuring sensitive data is not exposed unnecessarily.