Databricks-DA-Assoc Securing Data Practice Question
Which THREE actions are required to successfully secure an external location in Unity Catalog?
⚠ Common exam trap
Students often forget that securing an external location requires both a storage credential and an explicit file-level privilege grant like READ FILES.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a Storage Credential in Databricks.
Securing an external location in Unity Catalog involves creating a Storage Credential, linking that credential to an External Location, and granting specific permissions on that location. This layered approach ensures that access is controlled at both the cloud identity level and the Databricks governance level, allowing administrators to audit all access to external storage paths through Unity Catalog logs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a Storage Credential in Databricks.
Why this is correct
A Storage Credential object is required to store the cloud provider credentials that allow Databricks to access your storage account. This is the first step in the process, as the External Location depends on this credential to perform any read or write operations against the underlying cloud storage provider.
- ✓
Grant the 'READ FILES' or 'WRITE FILES' privilege on the external location.
Why this is correct
Even if the location exists, users cannot access it without explicit permission. Granting READ or WRITE privileges on the External Location object is necessary to authorize specific users or groups to interact with the files at that path, enforcing the principle of least privilege within the Databricks platform.
- ✓
Create an External Location object in Unity Catalog.
Why this is correct
The External Location object acts as a bridge between the Storage Credential and a specific path in your cloud storage. It acts as a controlled gateway that registers the storage location with Unity Catalog, allowing for granular permission management and auditing of all data access attempts at that specific path.
- ✗
Manually update the cluster's Spark configuration.
Why it's wrong here
One of the key benefits of Unity Catalog is that it eliminates the need to manually configure Spark properties for cloud access. By using External Locations and Storage Credentials, configuration is handled centrally by the platform, reducing the risk of misconfiguration and ensuring consistent security policies across all clusters.
- ✗
Provide all users the 'Owner' role on the metastore.
Why it's wrong here
Granting everyone the 'Owner' role is a severe security violation that grants total control over the metastore. Security should be managed by assigning specific, granular permissions to users and groups based on their actual job functions, following the principle of least privilege to prevent unauthorized changes or data access.
About these practice questions
This Databricks-DA-Assoc question is part of Courseiva's 291-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Databricks exam blueprint
This Databricks-DA-Assoc practice question is part of Courseiva's free Databricks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Databricks-DA-Assoc exam.