Noos
PT EN
RAN-DBDEA-00293
Ranvier · DBDEA

Exam DBDEA Topics: governance Difficulty: medium

A production pipeline reads its database password from the Databricks secret scope etl-secrets. The analysts' group must be able to read an API key stored in that same scope, but the group must not be allowed to change the scope's access rules or overwrite secret values. How should the admin grant the analysts this access?

Options (Reading Mode) Click to filter discussion →
  1. A. Grant nothing on the scope, because any workspace user can already read the secrets stored in every secret scope by default.
  2. B. Grant the group SELECT on the secret scope through Unity Catalog, because secret scope ACLs are inherited automatically from Unity Catalog group privileges.
  3. C. Grant the group the READ permission on the scope's ACL: READ allows reading secret values, and only MANAGE can change the scope's permissions.
  4. D. Grant the group MANAGE on the scope, because MANAGE is the permission level that lets principals read secret values.
Reveal answer

Correct answer: Grant the group the READ permission on the scope's ACL: READ allows reading secret values, and only MANAGE can change the scope's permissions.

Reference: https://docs.databricks.com/aws/en/security/secrets

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (C): Grant the group the READ permission on the scope's ACL: READ allows reading secret values, and only MANAGE can change the scope's permissions.

⚓ Official Documentation Anchor: https://docs.databricks.com/aws/en/security/secrets
Ranvier · DBDEA

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.