Secure and govern Unity Catalog objects

DP-750 · 35 questions

• A city wants resident-services analysts to read gold 311 metrics while parks volunteers must not access that table. Which Unity Catalog action should administrators take?
• A transit ridership pipeline runs as a service principal that must write silver tables without broader administrative power. How should Unity Catalog privileges be assigned?
• Housing caseworkers need case status fields from a resident table but must not read Social Security numbers in that same table. Which control should the data team apply?
• Courts analytics must ensure each clerk office sees only cases for its own jurisdiction code in a shared Unity Catalog table. What should they implement?
• Water utility notebooks must read ADLS without embedding storage keys in source code. How should secrets be obtained from within Azure Databricks?
• Permits ETL must call source APIs on a schedule without depending on an interactive engineer session. Which authentication approach should they use?
• County 311 streaming ingest must reach a restricted Azure Event Hubs namespace from Azure Databricks compute. Which access method should they prefer?
• A public-health steward must give one auditor temporary access to use a clinic staging schema without elevating them to metastore administrator. What should they grant?
• An open-data portal must read published gold tables while only engineering may write them. How should Unity Catalog privileges be separated?
• Emergency management shares some operational tables with mutual-aid partners but must keep internal after-action notes private. Which Unity Catalog control should they use?
• Library IT stores a vendor API token in Azure Key Vault for catalog ingest and must limit who can retrieve it for Databricks jobs. What should they configure?
• A school-district attendance pipeline must run under a non-human identity that is granted Unity Catalog access to attendance schemas. Which pattern should they implement?
• City security requires Azure Databricks to read sealed permit archives behind a storage firewall without distributing shared account keys. Which approach should they choose?
• After a mistaken truncate on 311 bronze landing tables, the platform team must correct who can change those tables. What Unity Catalog action is most appropriate?
• A housing authority needs analysts to compute case load counts without viewing encrypted national ID columns in the same resident table. Which control should they select?
• A transit agency stores high-sensitivity vehicle GPS breadcrumbs in Unity Catalog and must allow only the mobility-science group to read that table. What should the data engineer do?
• A county permitting office wants analysts to discover fee fields quickly in Catalog Explorer. What should stewards add to the Unity Catalog tables and columns?
• Public works wants attribute-based access so sensitivity and department attributes decide who can read utility datasets. What should they configure in Unity Catalog?
• A public-health department must stop epidemiologists outside a region from querying other regions’ case rows in the same Unity Catalog table. What should they apply?
• Courts analytics must let junior analysts query docket tables while redacting defendant dates of birth. Which Unity Catalog control should they configure?
• An open-data team must delete raw 311 attachment files after a mandated municipal retention window. What should they apply in Unity Catalog governance?
• Finance auditors need to see which jobs and upstream tables feed the published parking-revenue gold table. Where should they look in Azure Databricks?
• City security must determine who queried resident address tables last quarter. What should the team enable for Unity Catalog access?
• A regional metropolitan planning organization must share anonymized ridership aggregates with peer cities without granting them direct metastore access. What strategy should they use?
• Parks stewards need Catalog Explorer to show who last changed trail-closure schemas. Which governance metadata should they rely on?
• A 311 platform must block the sandbox group from reading production PII tables using department and environment attributes together. What should engineers configure?
• A housing authority must keep gold case metrics for statutory reporting longer than bronze chat transcripts. How should retention be designed?
• A clerk of courts wants to confirm that a gold docket summary depends on silver hearings and bronze CMS extracts. What should they examine?
• A county health office must give a university partner de-identified clinic visit counts without opening the county metastore. What should they implement?
• Security operations sees an unusual principal enumerating many Unity Catalog schemas overnight. Which artifact should they review first?
• Transit wants analysts and Genie to interpret delay reason code enums correctly. What should stewards maintain on the ridership delay table?
• Public health needs epidemiology heatmaps by ZIP3 while hiding patient ZIP+4 detail from general analysts. What should they configure?
• A city tags open-data tables as public and needs anonymous-facing service principals to read only those datasets. What should governance use?
• Emergency management lands raw CAD streams with precise coordinates and must minimize how long that sensitive data remains. What should they apply?
• Architecture must choose Unity Catalog controls for a multi-agency courts data product that needs row isolation, redaction, tagged policies, and partner exchange. Which combination fits?