Configure Authentication and Access Control ARA-C01 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A healthcare organization uses Snowflake with SAML SSO through its identity provider. The compliance team mandates that all interactive users must use MFA. The identity provider supports MFA, but some users have been logging in without it because the IdP does not enforce it for all applications. The Snowflake administrator needs to enforce MFA at the Snowflake level without disrupting the SAML SSO flow. What should the administrator do?

   • ADisable SAML SSO and switch all users to Snowflake-native authentication with MFA.
   • BRequire users to enroll in Snowflake MFA and set the 'ALLOW_CLIENT_MFA' parameter to 'true'.
   • CConfigure the identity provider to require MFA for the Snowflake application and ensure the SAML assertion includes the MFA context.
   • DEnable MFA enforcement in the SAML integration by setting the 'MFA_ENFORCEMENT' parameter to 'true'.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary benefit of a secure view in Snowflake?

   • AIt allows users to modify the underlying tables.
   • BIt hides the view definition from non-privileged users.
   • CIt improves query performance.
   • DIt automatically encrypts data.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A data platform team has created a view that joins several tables and applies complex business logic. The team wants to share this view with external partners, but they must ensure that the underlying table names and join logic are not exposed to the partners. What should the team use?

   • AA secure view with the appropriate privileges granted to the partners.
   • BA standard view with the OWNERSHIP privilege granted to the partners.
   • CA secure UDF that returns the data, with the UDF granted to the partners.
   • DA materialized view with the underlying tables also granted to the partners.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the benefit of using role hierarchies in Snowflake?

   • ASimplifies privilege management by allowing inheritance.
   • BEliminates the need for users.
   • CAllows multiple users to share the same password.
   • DIncreases the number of privileges automatically.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   In Snowflake's access control model, what is the primary entity that determines a user's privileges?

   • AUser
   • BDatabase
   • CRole
   • DWarehouse
   Reveal Solution Discussion Select an answer first