1. Unity Catalog Architecture and Object Management
The “Secure and govern Unity Catalog objects” section of exam DP-750 focuses on implementing centralized governance for data and AI assets within Azure Databricks. Unity Catalog acts as the primary governance layer and provides consistent management of permissions, auditing, lineage, and secure access across workspaces and compute environments. Candidates should understand the Unity Catalog hierarchy including metastores, catalogs, schemas, tables, views, volumes, functions, and external locations. Knowledge of how permissions inherit through this hierarchy is important for scalable governance. Candidates should also understand the difference between managed tables and external tables and when each approach is appropriate within a lakehouse architecture.
2. Access Control and Security Management
A major focus area is securing data through role-based access control and least-privilege principles. Candidates must understand how to grant permissions at different object levels including catalogs, schemas, tables, views, and functions. Important privileges include USE CATALOG, USE SCHEMA, SELECT, MODIFY, CREATE TABLE, and EXECUTE. The exam expects candidates to understand how centralized permission management simplifies administration and improves consistency across enterprise environments. Data engineers should also understand segregation of duties and how governance policies help organizations meet security and compliance requirements.
3. Secure Storage Access and Advanced Data Protection
The exam heavily emphasizes secure access to cloud storage systems such as Azure Data Lake Storage Gen2. Candidates should understand how Unity Catalog uses storage credentials, managed identities, and external locations to securely access storage without embedding secrets directly in notebooks or code. Microsoft recommends managed identities because they reduce operational overhead and remove the need for secret rotation. Advanced protection topics include row-level security, column-level security, and dynamic views. Candidates should know how these features restrict access to sensitive information based on user identity, role, or business rules while maintaining centralized governance.
4. Auditing, Lineage, and Secure Data Sharing
Candidates are expected to understand monitoring and governance capabilities within Unity Catalog. This includes auditing user activity, tracking data access, monitoring changes, and understanding lineage between datasets, pipelines, notebooks, and reports. These capabilities support troubleshooting, compliance, and regulatory requirements. The exam also covers secure collaboration and sharing using technologies such as Delta Sharing. Candidates should understand how Unity Catalog enables controlled sharing of data with internal teams or external organizations while maintaining centralized governance policies and secure access controls. Overall, this section validates that a candidate can design and manage a secure, governed, and enterprise-ready Azure Databricks environment for analytics and AI workloads.
Links
Microsoft Certified: Azure Databricks Data Engineer Associate – Certifications | Microsoft Learn