Use Unity Catalog Roles and Sharing Settings to Ensure Workspace Objects Are Secure. DATA-ANALYST-ASSOCIATE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a Unity Catalog metastore with a catalog that contains both internal and external tables. The security team requires that all external tables be read-only for all users. The data engineering team needs to be able to create and modify internal tables. What is the most effective way to enforce this policy?

   • AUse a view to mask external tables and grant SELECT on the view to all users.
   • BMake all users owners of the external tables and the data engineering team owners of the internal tables.
   • CCreate a separate schema for external tables and grant SELECT on that schema to all users. Grant CREATE, MODIFY on the internal schema to the data engineering team.
   • DGrant SELECT on the catalog to all users and grant CREATE, MODIFY on the catalog to the data engineering team.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A data analyst needs to revoke a user's access to a specific table. The user was previously granted SELECT on the table through a group. What is the correct way to revoke the user's access?

   • ARevoke SELECT on the table from the user directly.
   • BRevoke ALL PRIVILEGES on the table from the user.
   • CDrop the table and recreate it without the user's access.
   • DRemove the user from the group that has SELECT on the table.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which statement accurately describes how Unity Catalog roles control access to workspace objects?

   • ARoles grant permissions on data objects and are inherited through the object hierarchy
   • BRoles are applied only to individual tables and cannot be used for views or schemas
   • CRoles are only used for audit logging and do not affect data access
   • DRoles are assigned to clusters and determine which data the cluster can read
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A data analyst has created a curated table in a shared catalog that several teams query. The analyst needs to grant the marketing team the ability to read the table, but must not allow them to see the underlying raw data or modify the table. The marketing team is already provisioned as an Azure Databricks account-level group. What should the analyst do?

   • ARun: GRANT SELECT ON TABLE curated_db.marketing_table TO `marketing`;
   • BRun: GRANT ALL PRIVILEGES ON SCHEMA curated_db TO `marketing`;
   • CAdd the marketing group as a metastore admin.
   • DShare the table using Delta Sharing with the marketing group.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In Unity Catalog, what is the primary purpose of a role such as a metastore admin or a table owner?

   • ATo configure network-level security for the Databricks cluster
   • BTo grant permissions on data objects and manage access control within the metastore
   • CTo define which users can access the Databricks workspace UI
   • DTo assign compute resources to specific users for query execution
   Reveal Solution Discussion Select an answer first