Practice Exam

Explanations for each answer:

• Share Lakehouse1 with the data engineer is incorrect. Sharing Lakehouse1 would grant access to all tables including the Employee table with PII, which violates the security requirement that the data engineer should not be able to view the Employee table contents.
• Assign the data engineer the Contributor role for Workspace2 is incorrect. While the Contributor role is appropriate for write access, without creating Workspace2 and migrating the Employee table first, this action alone doesn't solve the isolation problem.
• Assign the data engineer the Viewer role for Workspace2 is incorrect. The Viewer role only provides read-only access and would not allow the data engineer to write data to the Customer table as required.
• Assign the data engineer the Contributor role for Workspace1 is correct. The Contributor role in Workspace1 allows the data engineer to work with tables in Lakehouse1 after the Employee table has been moved to a separate workspace, providing necessary write permissions to the Customer table.
• Migrate the Employee table from Lakehouse1 to Lakehouse2 is correct. Moving the Employee table containing PII to a separate lakehouse (Lakehouse2) physically isolates the sensitive data, ensuring the data engineer cannot access it while working in Lakehouse1.
• Create a new workspace named Workspace2 that contains a new lakehouse named Lakehouse2 is correct. Creating a separate workspace and lakehouse provides the infrastructure needed to isolate the PII data. The Employee table can be migrated here, and access can be restricted independently from Workspace1.
• Assign the data engineer the Viewer role for Workspace1 is incorrect. The Viewer role only grants read permissions and would not allow the data engineer to write data to the Customer table as required by the workflow.