DATABRICKS-DEP Question 34

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A0

  - Correct answer : A — Grant `USE CONNECTION` on the connection to each group, then grant `USE CATALOG` plus `SELECT` on just the one foreign catalog assigned to that group. A . `USE CONNECTION` lets a principal query through catalogs that reference the connection without exposing the stored host, port, or secret values, and scoping `USE CATALOG`/`SELECT` to just one foreign catalog per group keeps each group limited to its assigned data without letting any group create new catalogs. B . Granting `CREATE FOREIGN CATALOG` would let every group independently create catalogs from the shared connection, which violates the requirement that only the admin controls how many foreign catalogs exist. C . `ALL PRIVILEGES` on the connection includes catalog-creation and ownership-transfer rights well beyond read access, and connection-level options such as the stored credential remain outside what any grant exposes to a non-owner querying through it, but the privilege scope here is far broader than required and risky to hand to three separate groups. D . Transferring `OWNER` hands full control of the connection, including the ability to alter its credentials and drop it, to a group member — a much larger blast radius than the read-only, catalog-scoped access the scenario calls for.