Databricks-DE-Assoc Governance and Security Practice Question
A data engineer is configuring audit logging for a Databricks workspace that uses Unity Catalog. The security team requires that all access to data in Unity Catalog be logged and available for analysis in a centralized location. The data engineer wants to enable the delivery of audit logs to an AWS S3 bucket. Which configuration should the data engineer use?
⚠ Common exam trap
A common mix-up: candidates confuse workspace-level diagnostic logging with account-level audit log delivery, or assuming audit logs are configured per workspace.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure an audit log delivery in the account console, specifying the S3 bucket and IAM role for delivery.
Databricks audit logs, including Unity Catalog data access, can be delivered to an AWS S3 bucket through account-level configuration. This involves setting up a delivery mechanism with an IAM role that has write permissions to the bucket. The account console provides the interface for this setup, ensuring centralized log collection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure an audit log delivery in the account console, specifying the S3 bucket and IAM role for delivery.
Why this is correct
Unity Catalog audit logs are delivered via a system table or to a cloud storage location configured at the account level. The account console allows setting up audit log delivery to an S3 bucket with an IAM role that grants write access. This centralizes logs for security analysis.
- ✗
Enable diagnostic logging in the Databricks workspace and configure it to send logs to S3.
Why it's wrong here
Diagnostic logging in Databricks sends logs to a specified location, but it is not the mechanism for Unity Catalog audit logs. Unity Catalog audit logs are delivered through a separate system. Diagnostic logs cover cluster and job logs, not detailed data access audits.
- ✗
Enable Unity Catalog audit logs in the workspace settings and specify an S3 path for storage.
Why it's wrong here
Unity Catalog audit logs are not enabled per workspace; they are configured at the account level. Workspace settings do not provide an option to specify an S3 path for audit log delivery. The account console is the correct place for this configuration.
- ✗
Use the Databricks REST API to stream audit logs to an S3 bucket via a custom script.
Why it's wrong here
While the REST API can retrieve audit logs, it is not the standard method for continuous delivery to S3. The built-in audit log delivery is more reliable and scalable. Custom scripts would require maintenance and may not capture all events in real-time.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
About these practice questions
Courseiva writes every Databricks-DE-Assoc question from scratch — 276 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Databricks exam blueprint
This Databricks-DE-Assoc practice question is part of Courseiva's free Databricks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Databricks-DE-Assoc exam.