DP-750: Implementing Data Engineering Solutions Using Azure DatabricksDemo

By Microsoft · Question Mode

QuestionQ47

Secure and govern Unity Catalog objects

You have an Azure Databricks workspace.

You have an Azure key vault named kv-secure that stores a secret named storageKey. The cloud security team manages and updates the value of storageKey.

You need to let a Databricks notebook named Notebook1 securely retrieve the storageKey value at runtime. The solution must follow least privilege and always retrieve the latest value.

What should you do?

Select
Expose storageKey to Databricks by using:
Retrieve storageKey from within Notebook1 by using:
Explanation

An Azure Key Vault-backed secret scope provides a read-only interface to the Azure Key Vault, so secret updates remain managed in the vault rather than copied into Databricks. dbutils.secrets.get(scope, key) retrieves the secret value at notebook runtime. Granting only the required scope permission supports least privilege.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!