Configure Authentication and Access Control ARA-C01 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a typical setting in a Snowflake password policy?

   • ASession idle timeout
   • BAllowed IP addresses
   • CMasking format
   • DMinimum password length
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Snowflake feature can be used to enforce MFA for all users in an account?

   • ASession policy
   • BPassword policy
   • CAuthentication policy
   • DNetwork policy
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a 'CUSTOMERS' table with an 'EMAIL' column. The security team wants to ensure that the 'SUPPORT' role sees the full email address, while the 'ANALYST' role sees only the first three characters followed by '***'. The architect needs to implement this at the column level without changing the table. What should the architect do?

   • ACreate a second table with masked emails and grant ANALYST access to that table.
   • BCreate a masking policy on the EMAIL column that uses CURRENT_ROLE() to return the full value for SUPPORT and a masked value for ANALYST.
   • CCreate a secure view on the CUSTOMERS table that masks the EMAIL column and grant access to the view.
   • DUse a session policy to mask the EMAIL column for the ANALYST role.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of SCIM provisioning in Snowflake?

   • ATo enforce multi-factor authentication.
   • BTo automate user and group provisioning from an identity provider.
   • CTo create secure views.
   • DTo manage network policies.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security audit has revealed that user sessions in Snowflake remain active for too long, increasing the risk of unauthorized access. The security team wants to enforce a maximum session duration of 4 hours and an idle timeout of 30 minutes for all users. What should the architect configure?

   • AEnable MFA for all users to reduce the risk of unauthorized access.
   • BCreate a session policy with SESSION_IDLE_TIMEOUT_MINS = 30 and SESSION_TIMEOUT_MINS = 240, and apply it to the account.
   • CSet the user-level parameter 'SESSION_TIMEOUT_MINS' for each user individually.
   • DCreate a network policy with a session timeout of 30 minutes.
   Reveal Solution Discussion Select an answer first