Reviewed by Aditya Kumar · Last reviewed 2026-03-24
Architectural flow: Key Vault stores secrets and keys. Databricks accesses via Azure AD (Managed Identity or SP). Use: DB passwords, API keys; dbutils.secrets.get(scope, key). Secret scope linked to Key Vault. CMK for workspace encryption....
Architectural flow: Key Vault stores secrets and keys. Databricks accesses via Azure AD (Managed Identity or SP). Use: DB passwords, API keys; dbutils.secrets.get(scope, key). Secret scope linked to Key Vault. CMK for workspace encryption. Best practice: Managed Identity; secret scope; never hardcode; rotate.
Red Flag: Secrets in notebooks or config. Pro-Move: 'All secrets in Key Vault; scope linked; we use Managed Identity—zero secrets in Git.'
According to DataEngPrep.tech, this is one of the most frequently asked Cloud/Tools interview questions, reported at 1 company. DataEngPrep.tech maintains an editor-reviewed database of 1,863 data engineering interview questions across 7 categories.