Securing Data

A data analyst needs to share a sensitive sales table with the marketing team in Databricks. The marketing team should only see rows where the region column matches 'North America' and should not have access to the credit_card column. Which Unity Catalog feature should the data analyst implement?

A data analyst needs to grant a colleague read access to a specific table named 'quarterly_sales' within Unity Catalog without exposing other tables in the same schema. Which SQL command should the analyst execute?

Which identity management approach is required to utilize Unity Catalog for centralized governance across multiple Databricks workspaces?

An administrator needs to secure a table containing sensitive customer data. Which TWO options represent valid ways to restrict access using Unity Catalog?

What is the primary function of a Storage Credential in Unity Catalog?

When sharing data with external organizations using Delta Sharing, which component manages the secure exchange of data?

Which THREE actions are required to successfully secure an external location in Unity Catalog?

Refer to the exhibit. This IAM policy is attached to a Storage Credential. A user tries to run 'DROP TABLE' on a table stored in this bucket and fails. Why?

Which audit log category is most useful for identifying unauthorized attempts to access sensitive tables?

What is the purpose of the 'Account Admin' role in Databricks?

Refer to the exhibit. A data scientist can query both tables, but the join fails with a permission error. What is the most likely reason?

A data platform administrator needs to configure secure data access policies in Unity Catalog. Which TWO actions can the administrator perform to restrict access to sensitive columns within a Delta table? (Choose TWO)

An organization stores sensitive financial records in a Unity Catalog managed Delta table stored in cloud object storage. To comply with corporate security mandates, all data at rest must be encrypted using a customer-managed encryption key rather than the default cloud provider-managed keys. Where must the administrator configure this encryption setting?

A data analyst has been asked to grant a new team member read access to a specific table named 'customer_orders' in Unity Catalog. The analyst wants to ensure the team member can query the table but cannot see any other tables in the schema. Which SQL command should the analyst use?

A data analyst is using a Databricks SQL warehouse to query a table that is protected by row-level security using dynamic views in Unity Catalog. The analyst has SELECT on the view but not on the underlying table. When querying the view, the analyst receives an error about insufficient privileges on the base table. What is the most likely cause?

A data analyst has a Unity Catalog table `main.finance.payroll` that contains a column `ssn` with sensitive data. The analyst wants to allow the HR team to query the table but mask the `ssn` column so that only users in the `hr_admins` group see the actual values; all other users should see `***` instead. Which Unity Catalog feature should the analyst use to achieve this?

A data analyst needs to grant a service principal read access to a specific external location in Unity Catalog so that a scheduled job can read data from an S3 bucket. The analyst has already created a storage credential that references an IAM role with the necessary S3 permissions. Which Unity Catalog object must the analyst grant the service principal access to, in addition to the storage credential?

A data analyst in the 'marketing' group needs to query the table `main.sales.leads` but should not be able to read the underlying data files directly. The analyst currently has `SELECT` on the table and `READ FILES` on the external location where the table's data resides. Which Unity Catalog privilege should the analyst's `READ FILES` on the external location be removed to enforce least privilege?

A data analyst is reviewing audit logs in Databricks to investigate who accessed a sensitive table 'main.finance.payroll'. The analyst needs to identify the user, the timestamp, and the action performed. Which audit log service should the analyst query to find this information?

A data analyst at a multinational bank needs to ensure that queries against a Unity Catalog table 'main.risk.transactions' automatically hide the 'customer_ssn' column for users in the 'contractors' group, while all other users see the full data. The analyst wants to implement this without creating separate views for each user group. Which Unity Catalog feature should the analyst use?

A data analyst wants to share a Unity Catalog table with an external partner using Delta Sharing. The partner uses a non-Databricks client that supports the Delta Sharing protocol. Which Unity Catalog object must the analyst create to enable the partner to access the shared data?

A data analyst needs to grant a team member the ability to view the metadata of a table `main.finance.transactions` in Unity Catalog, but not query the data. Which privilege should the analyst grant?

A data analyst is using Databricks SQL to query a table `main.sales.orders` that has a column `credit_card` containing sensitive data. The analyst needs to run a query that aggregates orders by region but must not see the actual credit card numbers. Which Unity Catalog feature should be used to mask the `credit_card` column for this analyst?

A data analyst is reviewing audit logs in Databricks to investigate unauthorized access attempts to a sensitive table. Which audit log event type should the analyst filter on to find failed attempts to query the table?