Databricks Generative AI Engineer Associate Question 243
Select 3You are designing a governance framework for a Databricks workspace where multiple teams are developing and deploying Generative AI models. Which of the following best ensures compliance, security, and proper management of the resources in this workspace?
- A
Implement workspace-level access controls using role-based access control (RBAC) to limit access to sensitive data and resources.
- B
Enable Unity Catalog to manage and audit data access permissions across all teams.
- C
Allow unrestricted cluster configurations to promote flexibility for experimentation.
- D
Set up model versioning and approval workflows in the Model Registry to ensure proper oversight of deployed models.
- E
Disable audit logging to reduce storage costs and improve system performance.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure governance, compliance, and security in a Databricks workspace for Generative AI projects, it is essential to implement RBAC for access control, use Unity Catalog for centralized data and asset governance, and establish workflows for model versioning and approvals. These measures collectively help maintain proper oversight, security, and regulatory compliance. On the other hand, unrestricted cluster configurations and disabling audit logging go against governance best practices.
- A. Correct.
Implementing workspace-level access controls using RBAC is essential to ensure that only authorized users have access to sensitive data and resources, thereby enhancing security.
- B. Correct.
Enabling Unity Catalog provides centralized governance for data and AI assets, helping to manage and audit permissions effectively, which is critical for compliance.
- C. Incorrect.
Allowing unrestricted cluster configurations can lead to security risks and lack of standardization, making it an unsuitable practice for governed environments.
- D. Correct.
Setting up model versioning and approval workflows in the Model Registry ensures that only verified and approved models are deployed, which is crucial for governance and accountability.
- E. Incorrect.
Disabling audit logging compromises the ability to track and audit user actions, which is a key requirement for ensuring compliance and security.