Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam Certified Data Engineer Professional All Questions

View all questions & answers for the Certified Data Engineer Professional exam

Exam Certified Data Engineer Professional topic 1 question 167 discussion

Actual exam question from Databricks's Certified Data Engineer Professional
Question #: 167
Topic #: 1
[All Certified Data Engineer Professional Questions]

The data engineering team has been tasked with configuring connections to an external database that does not have a supported native connector with Databricks. The external database already has data security configured by group membership. These groups map directly to user groups already created in Databricks that represent various teams within the company.

A new login credential has been created for each group in the external database. The Databricks Utilities Secrets module will be used to make these credentials available to Databricks users.

Assuming that all the credentials are configured correctly on the external database and group membership is properly configured on Databricks, which statement describes how teams can be granted the minimum necessary access to using these credentials?

  • A. No additional configuration is necessary as long as all users are configured as administrators in the workspace where secrets have been added.
  • B. "Read" permissions should be set on a secret key mapped to those credentials that will be used by a given team.
  • C. "Read" permissions should be set on a secret scope containing only those credentials that will be used by a given team.
  • D. "Manage" permissions should be set on a secret scope containing only those credentials that will be used by a given team.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
hpkr
5 months, 2 weeks ago
Selected Answer: C
C is correct. Read permission on secret scope should work here.
upvoted 3 times
...
Freyr
5 months, 3 weeks ago
Selected Answer: C
Correct Answer: C This option is the best practice for managing access to sensitive data. By creating a secret scope dedicated to each team and setting "Read" permissions on the scope, you ensure that only the intended team members can access their respective credentials. This method aligns with security best practices by tightly controlling access based on group membership and reducing the risk of unauthorized access.
upvoted 3 times
...
MDWPartners
6 months ago
Selected Answer: C
Seems C
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...