Databricks Generative AI Engineer Associate Question 187
Select 2You are deploying a machine learning model using Databricks Model Serving and need to control access to the serving endpoint. Your organization requires that only users with specific roles or permissions can query the model. Which of the following steps should you take to achieve this?
- A
Enable Databricks authentication and assign appropriate access control lists (ACLs) to the model serving endpoint.
- B
Configure a private network for the Databricks workspace to restrict access to the serving endpoint.
- C
Use tokens or service principals to authenticate API requests to the serving endpoint.
- D
Disable all authentication mechanisms for the serving endpoint to simplify access management.
- E
Grant unrestricted access to all users in the Databricks workspace to ensure seamless collaboration.
Show answer and explanation
Correct answers: A, C
Explanation
To control access to resources from model serving endpoints in Databricks, you must enable authentication mechanisms such as Databricks authentication and assign ACLs to restrict access to specific users or roles. Additionally, when programmatic access is required, tokens or service principals can be used for secure authentication. These steps help enforce fine-grained access control while maintaining endpoint security.
- A. Correct.
Correct: Enabling Databricks authentication and setting ACLs ensures that only specific users or roles can access the serving endpoint.
- B. Incorrect.
Partially correct but not sufficient on its own: Configuring a private network helps restrict access at the network level but doesn't enforce user-based permissions or authentication.
- C. Correct.
Correct: Tokens and service principals are important for authenticating and securely accessing the serving endpoint programmatically.
- D. Incorrect.
Incorrect: Disabling authentication mechanisms completely would expose the endpoint to unauthorized access, which violates security best practices.
- E. Incorrect.
Incorrect: Granting unrestricted access to all users defeats the purpose of controlling access and poses significant security risks.