Configure Access Controls Using the UI and SQL by Applying GRANT, REVOKE, and DENY Privileges to Principals (users, Groups, and Service Principals) at Appropriate Levels of the Security Hierarchy. DATA-ENGINEER-ASSOCIATE Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   When using the Databricks UI to grant a privilege to a group, which of the following is a required step?

   • ACreate a new group in the account console before granting any privilege.
   • BRestart the SQL warehouse to apply the privilege change.
   • CWrite a SQL statement in a notebook to apply the grant.
   • DSelect the group from the list of principals and choose the privilege to grant.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A workspace has the following setup: the `engineering` group has SELECT on the `prod` catalog. The `data_science` group has SELECT on the `prod.ml` schema. User `carol` is a member of both groups. The admin runs `REVOKE SELECT ON SCHEMA prod.ml FROM data_science;`. What is Carol's effective access to the `prod.ml.model_features` table after this statement?

   • ACarol still has SELECT access because she inherits it from the `engineering` group's catalog-level grant.
   • BCarol loses SELECT access because REVOKE removes all grants, including inherited ones.
   • CCarol's access depends on whether the REVOKE was issued by the catalog owner.
   • DCarol loses SELECT access because the schema-level grant was the only source of her access.
   Reveal Solution Discussion Select an answer first