A contractor's engagement is being transferred to a partner organization. Today the contractor reads main.hr.compensation through membership in the hr_analysts group, which holds SELECT on that table. Security policy requires that this specific principal must never be able to read the table again — even if the contractor is later added to other groups that hold SELECT on it, now or in the future. Which action guarantees this outcome?
Reveal answer
Correct answer: Explicitly deny SELECT on the table to the contractor — it overrides any grant, group or direct.
Reference: https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-privileges/
Noos Visual & Functional Recognition
The “Sphere Embrace”: how Noos embraces top contributors without a childish mascot.
In neurobiology, glial cells wrap axons in myelin sheaths to accelerate neural impulses. On Noos, as your explanations earn accelerations and enter the Wiki Synthesis, the Noos Sphere wraps your Identicon with Keplerian orbits and two quantum nodes on its shoulders.
Pure 5×5 geometric Identicon (no personal photo, zero tracking). 1px frame.
Single dashed orbit with 1 bright polar node at the apex. Highlights those who passed the exam.
Two coaxial ellipses (±35°) wrap the avatar with two lateral nodes.
The Sphere Embrace: The Noos Sphere hood wraps the top of the Identicon and rests two luminous nodes on its shoulders.
02 — The Myelin Layer · Canonical Discussion
Where the exam tries to trick you — and how those who passed solved it.
contributed to this question
No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.
Official Answer (A): Explicitly deny SELECT on the table to the contractor — it overrides any grant, group or direct.
Contribute to this Question
✦ I PASSED!Peer contributions
No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.