Which statement about data sharing with external partners from Fabric is NOT a recommended practice?

• A. Use secure sharing through OneLake with proper ACLs, apply data masking and RBAC, and audit access; consider guest accounts and data separation.
• B. Share data publicly without restrictions.
• C. Apply data masking and RBAC.
• D. Audit access and implement governance reviews before sharing with external partners.

Answer: (B)

Sharing data with external partners must be controlled and governed to protect sensitive information and meet compliance. Publicly sharing without restrictions bypasses essential safeguards, making it impossible to know who can access the data, what they can see, or how it’s being used. That level of openness raises the risk of data leakage, misuse, and regulatory or policy violations.

Best practices focus on secure, auditable collaboration. Use secure sharing through a centralized data surface like OneLake with explicit access controls (ACLs) and role-based access control (RBAC) to enforce who can view or modify data. Apply data masking to protect sensitive values when needed and ensure access is logged so you can audit and review activity. When working with external partners, consider guest accounts and implement data separation so partners only access the specific datasets required for their work. Governance reviews and ongoing audits before and during sharing help maintain control and compliance over time.

Public sharing without these protections is not a recommended practice because it undermines security, privacy, and regulatory requirements.