Answer-first summary for fast verification
Answer: Organizing tables into separate databases based on quality tiers (Bronze, Silver, and Gold) to facilitate permission management through Access Control Lists (ACLs) and isolate physical storage.
### Explanation **B is correct.** In Databricks and Unity Catalog, a **database (schema)** is the standard unit for granting and managing permissions. By segregating tables into Bronze, Silver, and Gold databases, you can implement the **principle of least privilege**: * **Logical Separation:** You can grant `USE SCHEMA` and `SELECT` privileges to specific groups (e.g., Data Scientists on Silver, Analysts on Gold) without exposing the raw, sensitive Bronze data. * **Physical Isolation:** Managed tables in different schemas can be mapped to different storage locations. This ensures that raw data can be stored in highly restricted storage containers while Gold data resides in areas accessible to BI tools. ### Why other options are incorrect: * **A is incorrect:** Placing all tables in one database creates a flat security profile. It is much harder to restrict access to raw or PII-containing data if a user needs access to other tables in that same database. * **C is incorrect:** The `default` database and DBFS root are not inherently secure; in fact, the DBFS root is often less secure than specific external locations because it is a shared resource that lacks the granular isolation of purpose-built schemas. * **D is incorrect:** The organizational structure of databases is the primary mechanism for implementing security (ACLs), data lineage, and discoverability in the Lakehouse. Grouping by tier is essential for governance.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A data engineering team is migrating a large-scale enterprise system with thousands of tables into a Lakehouse architecture. The implementation follows the Medallion architecture with the following requirements:
To minimize security risks while maximizing cross-team collaboration, which organizational strategy represents the best practice?
A
Consolidating all production tables into a single database to offer a unified view and simplify data discoverability for all users.
B
Organizing tables into separate databases based on quality tiers (Bronze, Silver, and Gold) to facilitate permission management through Access Control Lists (ACLs) and isolate physical storage.
C
Relying on the default Databricks database for all managed tables to ensure they are stored in the DBFS root for enhanced security.
D
Viewing Databricks databases as purely logical constructs where the chosen organizational structure does not impact security or discoverability.