Question 320
A collaboration platform needs governed data distribution beyond one workspace. An auditor must prove the outcome of Rotate or revoke the recipient's open sharing credentials for this requirement: A recipient's token was leaked and all data access from that credential must stop. Which test result is best?
Explanation
Correct Answer
Old credential use fails while replacement authorized access succeeds directly measures whether Rotate or revoke the recipient's open sharing credentials achieved the requirement “A recipient's token was leaked and all data access from that credential must stop.” It checks the operating result rather than just a configured resource name.
Incorrect Answers
This signal belongs to the adjacent case “A partner runs non-Databricks compute and needs open-protocol access,” whose remedy is Use Delta Sharing open sharing with appropriate recipient credentials. The observed result for the present requirement is Old credential use fails while replacement authorized access succeeds.
This signal belongs to the adjacent case “A recipient also uses Databricks with compatible Unity Catalog sharing,” whose remedy is Use Databricks-to-Databricks sharing for the authorized recipient. The observed result for the present requirement is Old credential use fails while replacement authorized access succeeds.
The recipient sees authorized data objects but not unrelated workspace files would demonstrate the separate action Grant share access only to the intended tables or views, which addresses “An owner wants to share selected curated objects while keeping source notebooks private.” It does not verify the requirement “A recipient's token was leaked and all data access from that credential must stop” following Rotate or revoke the recipient's open sharing credentials.