LFC Security & Governance 5

Question 1

Which system table in Unity Catalog can be queried to see a history of all privilege grants and revocations on a securable object?

Accepted Answer

system.access.audit

Answer

The system.access.audit table records all access-related events including GRANT and REVOKE operations, enabling compliance auditing.

Question 2

What is the effect of granting the ALL PRIVILEGES privilege to a user on a Unity Catalog schema?

Accepted Answer

The user receives every applicable privilege on the schema and its child objects

Answer

ALL PRIVILEGES is a shorthand that grants every applicable permission (SELECT, MODIFY, CREATE TABLE, etc.) on the target object and cascades to its children.

Question 3

In Unity Catalog, which component stores the cloud storage access credentials (e.g., an IAM role or managed identity) needed to access an external location?

Accepted Answer

Storage credential

Answer

A storage credential in Unity Catalog encapsulates the cloud IAM role or managed identity that Databricks uses to authenticate to cloud object storage.

Question 4

A data steward needs to ensure that any new tables created in a production catalog automatically inherit a 'confidential' classification tag. Which approach best supports this at scale?

Accepted Answer

Use Unity Catalog tag propagation policies

Answer

Unity Catalog supports tag inheritance and propagation policies that allow tags set at a catalog or schema level to flow down to child objects automatically.

Question 5

Which Databricks feature allows a data owner to share live, updateable data with an external organization while maintaining full control over what data is shared and with whom?

Accepted Answer

Delta Sharing with provider/recipient model

Answer

Delta Sharing's provider/recipient model lets a data owner define shares containing specific tables or partitions and control which named recipients can access them.

(LFC) Lakehouse Fundamentals Certification Practice Test

(LFC) Lakehouse Fundamentals Certification Practice Test

LFC Security & Governance 5