Noos
PT EN
RAN-DBDEA-00115
Ranvier · DBDEA

Exam DBDEA Topics: governance Difficulty: medium

A bank runs 200+ Delta tables across the catalogs main and finance. Sensitive columns are classified with governed tags. The governance team must guarantee consistent masking rules for all of them, and — critically — table owners must not be able to weaken or remove the protections on their own tables. New tables are created daily and must be covered automatically once they are tagged. Which approach meets these requirements?

Options (Reading Mode) Click to filter discussion →
  1. A. Each table owner writes a masking UDF and runs ALTER TABLE ... ALTER COLUMN ... SET MASK on their own tables.
  2. B. ABAC column mask policies at the catalog level using governed tags: automatic coverage, and table owners cannot override them.
  3. C. The governance team creates one dynamic view per table, embedding is_account_group_member() checks in each view definition.
  4. D. The governance team grants SELECT on all sensitive tables only to the compliance_team group and tells everyone else to request extracts.
Reveal answer

Correct answer: ABAC column mask policies at the catalog level using governed tags: automatic coverage, and table owners cannot override them.

Reference: https://docs.databricks.com/aws/en/data-governance/unity-catalog/abac/abac-vs-rls-cm

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (B): ABAC column mask policies at the catalog level using governed tags: automatic coverage, and table owners cannot override them.

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.