Design Account and Role Architecture ARA-C01 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A healthcare organization must comply with internal audit requirements that mandate separation of duties. The same user must not be able to both create and load data into a table and also grant access to that table to other users. The organization uses a single Snowflake account. The architect must design a role hierarchy that enforces this control while minimizing administrative overhead. Which design meets the requirement?

   • ACreate a single custom role with CREATE TABLE and INSERT privileges, and rely on the account-level ACCOUNTADMIN to handle all grants.
   • BCreate a single custom role with CREATE TABLE, INSERT, and GRANT OPTION privileges, and assign all data stewards to it.
   • CCreate two custom roles: a Data Engineer role with CREATE TABLE and INSERT privileges, and a Data Access Manager role with the MANAGE GRANTS privilege. Assign users to only one of the two roles.
   • DCreate a custom Data Engineer role with CREATE TABLE and INSERT privileges, and grant the SECURITYADMIN role to the same users so they can grant access when needed.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Snowflake, how can separation of duties be implemented?

   • ABy creating separate roles for different administrative functions, such as user management and warehouse management.
   • BBy granting all administrative privileges to a single role.
   • CBy using only the ACCOUNTADMIN role for all administrative tasks.
   • DBy granting users direct privileges on objects instead of using roles.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the goal of separation of duties in role design?

   • ATo reduce the number of roles in the system.
   • BTo ensure that no single user has conflicting responsibilities that could lead to fraud or error.
   • CTo ensure that all users have the same level of access.
   • DTo simplify user management by assigning all privileges to a single role.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which scenario is most appropriate for using a built-in role in Snowflake?

   • AA user needs full administrative control over the entire Snowflake account.
   • BA user needs to create and manage users and roles but not manage warehouses.
   • CA data analyst needs to query tables in a specific schema and create views on those tables.
   • DA user needs to manage only a subset of warehouses and databases.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which Snowflake feature is used to configure cross-account role sharing?

   • AResource monitors
   • BCross-account role grants
   • CSecure views
   • DData Sharing
   Reveal Solution Discussion Select an answer first