Ensuring Data Security and Compliance Study Guide — Data Engineer Professional

Ensuring Data Security and Compliance – DE Professional Study Guide

This domain accounts for 10% of the exam and covers securing data with access controls, masking, secrets, encryption, and PII handling on Databricks.

Fine-Grained Access Control (Unity Catalog)

• Privileges — grant SELECT, MODIFY, USAGE, etc. on securable objects (catalog/schema/table) to users/groups for centralized access control.
• Row filters — row-level security returning only the rows a user may see (e.g., by region).
• Column masks — dynamic data masking so most users see obfuscated values while privileged users see raw values.

Secrets

Store credentials/API keys in Databricks secret scopes and reference them via dbutils.secrets at runtime — values are redacted in output. Never hard-code secrets in notebooks or print them to logs.