Databricks-DE-Assoc Databricks Intelligence Platform Practice Question
Exhibit
{
"action": "allow",
"principal": "analyst-group",
"privileges": ["SELECT"],
"securable_object": "main.sales.revenue"
}Refer to the exhibit. A security administrator applies this Unity Catalog policy. What is the impact on users in the 'analyst-group'?
⚠ Common exam trap
Test-takers often misinterpret explicit SELECT privileges in Unity Catalog policies as restrictive blocks, confusing granting read access with revoking permissions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
They can view the contents of the revenue table.
This Unity Catalog JSON policy grants the 'analyst-group' the SELECT privilege on the 'main.sales.revenue' table. Consequently, any user belonging to this group will be able to read data from this specific table. This is a standard governance practice in Databricks, providing a fine-grained, centralized method to control access to sensitive data assets across the entire organization, ensuring security and compliance without managing individual permissions for each user.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
They can drop the revenue table.
Why it's wrong here
The privilege granted is 'SELECT', which only allows users to read or query the data. It does not include administrative permissions like 'DROP' or 'ALTER'. Granting read-only access is a best practice to ensure data integrity and prevent unauthorized modifications to critical production tables by end users.
- ✓
They can view the contents of the revenue table.
Why this is correct
The 'SELECT' privilege explicitly authorizes users to read data from the table. By granting this to the 'analyst-group', all members can now execute SELECT queries against the table, enabling them to analyze the data for business purposes while maintaining security protocols through the centralized Unity Catalog governance model.
- ✗
They gain administrative rights over the entire catalog.
Why it's wrong here
The privilege is scoped specifically to the 'main.sales.revenue' object. It does not grant broader permissions on the catalog or other databases within the environment. This adheres to the principle of least privilege, ensuring that users only have the access they need to perform their specific job functions.
- ✗
They can write new data into the revenue table.
Why it's wrong here
Granting 'SELECT' only provides read-only access to the data. It does not provide 'INSERT', 'UPDATE', or 'DELETE' permissions. This restriction is crucial for maintaining data quality and preventing accidental or malicious changes to the table, ensuring that only authorized data engineers can update the revenue data.
About these practice questions
One of 276 original Databricks-DE-Assoc practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Databricks exam blueprint
This Databricks-DE-Assoc practice question is part of Courseiva's free Databricks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Databricks-DE-Assoc exam.