Noos
PT EN
RAN-DBDEA-00113
Ranvier · DBDEA

Exam DBDEA Topics: governance Difficulty: medium

An HR database contains employee records with sensitive Social Security Numbers. The ssn column of main.hr.employees is protected as follows: ```sql CREATE FUNCTION main.sec.ssn_mask(ssn STRING) RETURN CASE WHEN is_account_group_member('hr_payroll') THEN ssn ELSE '***-**-' || right(ssn, 4) END; ALTER TABLE main.hr.employees ALTER COLUMN ssn SET MASK main.sec.ssn_mask; ``` An HR analyst (member of hr_payroll) and a finance analyst (not a member) both hold SELECT on the table and run: ```sql SELECT name, ssn FROM main.hr.employees; ``` What does each analyst see in the ssn column?

Options (Reading Mode) Click to filter discussion →
  1. A. Both see the full SSN values, because both principals hold SELECT on the table and masks only apply to writes.
  2. B. Both see masked values; the raw values can only be read from the underlying files.
  3. C. The finance analyst's query fails, because the mask blocks users outside hr_payroll.
  4. D. The HR analyst sees the full SSN values; the finance analyst sees values such as ***-**-1234.
Reveal answer

Correct answer: The HR analyst sees the full SSN values; the finance analyst sees values such as ***-**-1234.

Reference: https://docs.databricks.com/aws/en/data-governance/unity-catalog/filters-and-masks/

Train this exam on Ranvier →

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (D): The HR analyst sees the full SSN values; the finance analyst sees values such as ***-**-1234.

Ranvier · DBDEA

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.