Noos
PT EN
RAN-DBDEA-00299
Ranvier · DBDEA

Exam DBDEA Topics: governance Difficulty: medium

A Lakeflow Job writes manifest files directly to the cloud storage path s3://acme-dropzone/manifests/, which is registered in Unity Catalog as the external location acme_dropzone. The job runs under the service principal loader-sp and does not write through any table or volume. Which grant authorizes the job's writes?

Options (Reading Mode) Click to filter discussion →
  1. A. Grant the service principal WRITE FILES on the external location acme_dropzone, which authorizes direct writes on the registered path.
  2. B. Grant the service principal SELECT on the external location acme_dropzone, which is the standard read privilege for governed data objects.
  3. C. Grant the service principal WRITE VOLUME on the external location acme_dropzone, because volume privileges cover its registered storage paths.
  4. D. Grant the service principal nothing, because Unity Catalog cannot authorize direct writes to a storage path outside tables and volumes.
Reveal answer

Correct answer: Grant the service principal WRITE FILES on the external location acme_dropzone, which authorizes direct writes on the registered path.

Reference: https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-privileges/

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (A): Grant the service principal WRITE FILES on the external location acme_dropzone, which authorizes direct writes on the registered path.

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.