DP-750: Implementing Data Engineering Solutions Using Azure DatabricksDemo

By Microsoft · Question Mode

QuestionQ50

Secure and govern Unity Catalog objects

You have an Azure Databricks workspace enabled for Unity Catalog.

You need to create an external volume named Volume1 in an existing schema. Volume1 must expose files from an Azure Storage container. The solution must meet these requirements:

  • Ensure authentication does not require credentials to be stored in Databricks.
  • Ensure users can access, but cannot modify, the files.
  • Follow the principle of least privilege.

Which authentication type should you configure, and which permission should you grant to users?

Select
Authentication type:
Permission:
Explanation

An Azure Databricks access connector uses an Azure managed identity to authenticate to Azure storage, avoiding storage of service-principal secrets or SAS credentials in Databricks. READ VOLUME permits users to read and list files in a Unity Catalog volume; WRITE VOLUME is required to create, modify, or delete files, so it is not needed for read-only access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!