In Databricks, what is the primary role of an Access Control List (ACL) on a workspace object?

To track all access attempts to the object for audit logging

To automatically classify the sensitivity of the object's content

To define which users or groups can perform specific actions on the object

To encrypt the data stored within the object at rest

A retail company has a Delta table with a 'credit_card' column. Support agents need to see the last four digits, while finance managers need the full number. The security team wants to enforce this at the table level. What should the data engineer implement?

Apply a column mask on the 'credit_card' column that returns the full number for finance managers and the last four digits for all other users.

Store the credit card numbers in a separate table and join only for finance managers.

Create a row filter that hides the 'credit_card' column for support agents.

Create a view that selects only the last four digits and grant support agents access to the view, while finance managers access the base table.

DatabricksCertified Data Engineer Professional

Domain 7Objective 1

Applying Data Security Mechanisms. DATA-ENGINEER-PROFESSIONAL Practice Questions (Page 4)

Part of the Ensuring Data Security and Compliance domain, which accounts for 10% of the DATA-ENGINEER-PROFESSIONAL exam. Databricks does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 3–4 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

8concepts

10%of the exam

Questions 16–20

16foundation · easy
In Databricks, what is the primary role of an Access Control List (ACL) on a workspace object?
Select an answer first
17application · medium
A retail company has a Delta table with a 'credit_card' column. Support agents need to see the last four digits, while finance managers need the full number. The security team wants to enforce this at the table level. What should the data engineer implement?
Select an answer first
18foundation · easy
Which pseudonymization technique replaces sensitive values with a reversible token that can be mapped back to the original value under controlled conditions?
Select an answer first
19foundation · easy
Which anonymization technique replaces specific values with broader, less precise categories to reduce identifiability?
Select an answer first
20foundation · easy
Which Databricks feature allows you to apply a filter to a table so that users only see rows where a specific column matches their user ID?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DATA-ENGINEER-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Databricks. “DATA-ENGINEER-PROFESSIONAL” is a trademark of its owner, used for identification only.

Applying Data Security Mechanisms. DATA-ENGINEER-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

In Databricks, what is the primary role of an Access Control List (ACL) on a workspace object?

A retail company has a Delta table with a 'credit_card' column. Support agents need to see the last four digits, while finance managers need the full number. The security team wants to enforce this at the table level. What should the data engineer implement?

Which pseudonymization technique replaces sensitive values with a reversible token that can be mapped back to the original value under controlled conditions?

Which anonymization technique replaces specific values with broader, less precise categories to reduce identifiability?

Which Databricks feature allows you to apply a filter to a table so that users only see rows where a specific column matches their user ID?

Keep studying — Ensuring Data Security and Compliance