DP-750: Implementing Data Engineering Solutions Using Azure DatabricksDemo

By Microsoft · Question Mode

QuestionQ59

Secure and govern Unity Catalog objects

You have an Azure Databricks workspace enabled for Unity Catalog that contains a catalog named Catalog1. Catalog1 includes a table named Transactions. Transactions has the following columns: transaction_id, customer_name, email_address, credit_card_number, transaction_amount.

You need to ensure that business analysts can query every row in the Transactions table. The solution must meet these requirements:

  • Prevent the analysts from viewing the complete values in the email_address and credit_card_number columns.
  • Ensure that analysts can see only the values following the @ character in each email address.
  • Ensure that analysts can see only the final four digits of every credit card number.
  • Allow the analysts to query the table without errors.
  • Follow the principle of least privilege.

What should you do?

  • A Grant the analysts the SELECT permission for the Transactions table and apply column-level encryption.
  • B Grant the analysts the SELECT permission for columns that do NOT contain sensitive data.
  • C Grant the analysts the SELECT permission for the Transactions table and implement row-level filters.
  • D Grant the analysts the SELECT permission for the Transactions table and apply column masks to email_address and credit_card_number.
Explanation

Unity Catalog column masks apply a function to a column whenever table rows are fetched, returning the masked result instead of the original value. A mask can expose only an email domain and only the last four digits of a credit card number while preserving all rows. SELECT grants read access to the table; row filters restrict rows rather than redact column values.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!