A data engineer manages a Unity Catalog table customer_data in schema finance that includes sensitive fields like ssn and credit_score. Intern Group should only see masked values, while Analyst Group should only access rows for their assigned region. The data engineer needs to restrict access based on user role and region without duplicating data. How should the data engineer enforce this security policy?

• A.Use Unity Catalog's row filters based on the region and column masks based on user roles.
• B.Create views using current_user() and is_account_group_member() functions, and apply masking logic inside the SQL SELECT clause for each sensitive column.
• C.Create dynamic views for each user role and manage access with ACLs.
• D.Use Unity Catalog's row filters based on the user roles and column masks based on the region.

Comment: *

Name: *

Email: *

Verification: *

A data engineer us ingesting JSON files from cloud object storage using Databricks Auto Loader.
The source folder may occasionally receive large files of data, which risks overwhelming the stream. To ensure predictable micro-batch sizes, the team wants to throttle ingestion based on the volume of data scanned at 1 GB, regardless of the number of files. Which Auto Loader configuration should the data engineer used to achieve this?

• A.Configure cloudFiles.maxBytesPerTrigger with 1 GB to place a limit.
• B.Configure cloudFiles.maxSizePerTrigger with 1 GB to place a limit.
• C.Configure cloudFiles.maxFilesPerTrigger and estimate the average file size to approximate a size-based throttle of 1 GB.
• D.Configure cloudFiles.maxPartitionBytes with 1GB to limit data in each partition.

Comment: *

Name: *

Email: *

Verification: *

Two of the most common data locations on Databricks are the DBFS root storage and external object storage mounted with dbutils.fs.mount().
Which of the following statements is correct?

• A.DBFS is a file system protocol that allows users to interact with files stored in object storage using syntax and guarantees similar to Unix file systems.
• B.By default, both the DBFS root and mounted data sources are only accessible to workspace administrators.
• C.The DBFS root is the most secure location to store data, because mounted storage volumes must have full public read and write permissions.
• D.Neither the DBFS root nor mounted storage can be accessed when using %sh in a Databricks notebook.
• E.The DBFS root stores files in ephemeral block volumes attached to the driver, while mounted directories will always persist saved data to external storage between sessions.

Comment: *

Name: *

Email: *

Verification: *

A view is registered with the following code:

Both users and orders are Delta Lake tables.
Which statement describes the results of querying recent_orders?

• A.Results will be computed and cached when the view is defined; these cached results will incrementally update as new records are inserted into source tables.
• B.All logic will execute at query time and return the result of joining the valid versions of the source tables at the time the query began.
• C.All logic will execute when the view is defined and store the result of joining tables to the DBFS; this stored data will be returned when the view is queried.
• D.All logic will execute at query time and return the result of joining the valid versions of the source tables at the time the query finishes.

Comment: *

Name: *

Email: *

Verification: *

A job runs four independent tasks (X, Y, Z, W) in parallel to process regional sales data. The Data Engineering team recently updated its cluster policy to ban cost-prohibitive instance types. Task Y now fails due to the newly enforced cluster policy restricting the use of a specific instance type.
A data engineer needs to resolve the failure quickly without disrupting the other tasks. How should the data engineer resolve the failure of tasks?

• A.Delete the failed run, disable the cluster policy, and re-execute all tasks.
• B.Manually create a new cluster for Task Y, update the job configuration, and trigger a full re-run.
• C.Use "Repair run", override the cluster configuration for Task Y to use a permitted instance type, and let Databricks re-run only Task Y.
• D.Edit the global cluster policy to allow the restricted instance type, then re-run the entire job.

Comment: *

Name: *

Email: *

Verification: *