Configure Authentication and Access Control ARA-C01 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which SQL command is used to create a custom role in Snowflake?

   • ACREATE ROLE
   • BGRANT ROLE
   • CALTER ROLE
   • DCREATE USER
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company's security policy requires that passwords be at least 12 characters, contain uppercase, lowercase, and a number, and be rotated every 60 days. The company also wants to prevent users from reusing their previous 5 passwords. What should the architect configure?

   • ACreate a password policy with PASSWORD_MIN_LENGTH = 12, PASSWORD_MAX_AGE_DAYS = 60, and PASSWORD_HISTORY = 5.
   • BUse a network policy to enforce password complexity and rotation.
   • CEnable MFA for all users to satisfy the password complexity requirement.
   • DCreate a session policy with PASSWORD_MIN_LENGTH = 12 and PASSWORD_MAX_AGE_DAYS = 60.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a 'FINANCE' schema with a table 'TRANSACTIONS' that contains a 'CARD_NUMBER' column. The compliance team requires that only the 'FINANCE_ADMIN' role can see the full card number, while the 'FINANCE_ANALYST' role must see a masked version. The architect needs to implement this without changing the underlying table data. What should the architect do?

   • ACreate a secure view on the TRANSACTIONS table that masks CARD_NUMBER and grant access to the view instead of the table.
   • BCreate a masking policy on the CARD_NUMBER column that returns the full value for FINANCE_ADMIN and a masked value for all other roles.
   • CCreate a second table with masked data and grant FINANCE_ANALYST access to that table.
   • DUse row-level security to filter rows based on the user's role.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which authentication method is best suited for a service account that needs to authenticate to Snowflake without user interaction?

   • AKey-pair authentication
   • BSnowflake-native authentication with password
   • CSAML federated authentication
   • DMulti-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services firm is implementing SAML SSO with Azure AD. The identity team has created the security integration and configured the identity provider. The Snowflake administrator notices that new employees are not automatically able to log in, even though their Azure AD accounts are active. The firm wants to minimize manual administration. What should the administrator do to resolve this?

   • ASet up SCIM provisioning to automatically create and map Snowflake users from Azure AD groups.
   • BManually create a Snowflake user for each new employee and grant the PUBLIC role.
   • CModify the SAML integration to use 'snowflake_user' as the default role for all users.
   • DAsk users to log in once with their Azure AD credentials to trigger automatic user creation.
   Reveal Solution Discussion Select an answer first