Question
You have an Azure Databricks workspace that is enabled for Unity Catalog and contains a catalog named Catalog1. Catalog1 contains a schema named Schema1 and a table named Table1.
You need to ensure that access to the data in Table1 is controlled by using attribute-based access control (ABAC).
What should you apply to Table1, and how should you control access for users? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Apply to Table1: in Unity Catalog ABAC, the attributes that drive access are represented by governed tags on securable objects. A table privilege is a direct grant rather than an attribute, and a workspace permission does not govern Unity Catalog data.
To control user access: a Unity Catalog policy uses the governed tags in its conditions and takes effect automatically on objects that carry those attributes. A dynamic view is a separate mechanism that holds its logic in the view definition and is not ABAC. Granting SELECT only gives direct access and evaluates no attributes.
