Certified Data Engineer Professional Exam - Question 84

Question

The data architect has decided that once data has been ingested from external sources into the

Databricks Lakehouse, table access controls will be leveraged to manage permissions for all production tables and views.

The following logic was executed to grant privileges for interactive queries on a production database to the core engineering group.

GRANT USAGE ON DATABASE prod TO eng;

GRANT SELECT ON DATABASE prod TO eng;

Assuming these are the only privileges that have been granted to the eng group and that these users are not workspace administrators, which statement describes their privileges?

Examice · Accepted Answer

Group members have been granted USAGE and SELECT privileges on the prod database. The USAGE privilege allows them to access the database context and list tables, while the SELECT privilege allows them to run queries on tables and views. They do not have permissions to create or modify tables or views. Thus, they are only able to query all tables and views in the prod database, but cannot create or edit anything in the database.

sturcu · Answer

Usage and Select ....sa abasically they can only select

Dileepvikram · Answer

D is answer

aragorn_brego · Answer

The GRANT USAGE ON DATABASE statement gives the eng group the ability to access the prod database. This means they can enter the database context and list the tables. The GRANT SELECT ON DATABASE statement additionally grants them permission to perform SELECT queries on all existing tables and views within the prod database. However, these privileges do not include creating new tables or views, modifying existing tables, or assigning permissions to other users or groups.

divingbell17 · Answer

D is correct assuming unity catalog is not enabled

vctrhugo · Answer

The GRANT statements provided in the logic grant the USAGE privilege, allowing the group members to see the existence of the database, and the SELECT privilege, allowing them to query tables and views. However, they do not have permissions to create or edit anything in the database. Therefore, the correct description is that group members can query all tables and views in the prod database but cannot create or edit any objects in the database.

Curious76 · Answer

D is correct

Certified Data Engineer Professional Exam - Question 84

Discussion