Subdomain 1.1: Understand the core components of the Databricks Data Intelligence Platform, such as its architecture, Delta Lake, and Unity Catalog.
1.A financial institution is evaluating Databricks and has strict security requirements. They require that all customer data and the compute resources used to process it reside entirely within their own cloud provider account (e.g., AWS VPC or Azure VNet). However, they want Databricks to manage the workspace UI, cluster orchestration, and job scheduling. How does the Databricks architecture support this requirement?
- A.Databricks deploys both the control plane and the data plane within the customer's cloud account.
- B.Databricks hosts the control plane in its own cloud account, while the data plane (compute and storage) resides in the customer's cloud account.
- C.Databricks hosts the data plane in its own cloud account, while the control plane resides in the customer's cloud account.
- D.Databricks requires the customer to use Serverless compute to ensure data remains in the customer's account.
- E.Databricks stores the data in the control plane but processes it in the data plane.
Show answer & explanation
Correct answer: B — Databricks hosts the control plane in its own cloud account, while the data plane (compute and storage) resides in the customer's cloud account.
- A. Incorrect. In the standard Databricks architecture, the control plane is managed by Databricks in its own account, not within the customer's account.
- B. Correct. This describes the classic Databricks architecture. The control plane (residing in Databricks' cloud account) handles management tasks like UI, orchestration, and scheduling. The data plane (residing in the customer's cloud account) contains the compute clusters and the object storage where the data is actually stored and processed, ensuring the customer maintains physical control over their data.
- C. Incorrect. This is the reverse of the actual architecture; hosting the data plane in Databricks' account would violate the security requirement that data and compute reside in the customer account.
- D. Incorrect. Serverless compute actually moves the compute resources into the Databricks cloud account (the 'Serverless Data Plane'). This would contradict the institution's requirement that compute resources reside entirely within their own cloud provider account.
- E. Incorrect. Databricks never stores customer data in the control plane. The control plane only stores metadata and configuration (like notebooks and job definitions), while all customer data remains in the data plane.