Question 330
A multi-cloud company has operational tables in external databases that cannot be copied yet. Engineers have applied Apply least-privilege UC grants on the connection/foreign objects. Which result establishes the required behavior: Only a subset of analysts may query a connected external finance database?
Explanation
Correct Answer
The acceptance criterion for “Only a subset of analysts may query a connected external finance database” is Unauthorized principals cannot select the sensitive foreign tables; this is the expected evidence after Apply least-privilege UC grants on the connection/foreign objects.
Incorrect Answers
This signal belongs to the adjacent case “A frequently accessed large foreign table causes slow queries across the network,” whose remedy is Materialize selected data into Delta when latency and egress make federation inefficient. The observed result for the present requirement is Unauthorized principals cannot select the sensitive foreign tables.
That observation is a valid indicator for “A foreign schema evolves and analysts cannot see a new remote column” when using Refresh the supported foreign catalog metadata or mappings. The scenario instead tests “Only a subset of analysts may query a connected external finance database”; the relevant result is Unauthorized principals cannot select the sensitive foreign tables.
Analysts query the foreign catalog using delegated privileges would demonstrate the separate action Store connection credentials in a governed UC connection, which addresses “The external database credentials must not be embedded inside analysis notebooks.” It does not verify the requirement “Only a subset of analysts may query a connected external finance database” following Apply least-privilege UC grants on the connection/foreign objects.