According to RBAC principles, how should users be assigned to roles in Snowflake?

Based on the order in which they were hired, with earlier hires receiving more privileges.

Based on their seniority in the organization, with higher seniority receiving more privileges.

Based on their job functions and the privileges required to perform those functions.

Based on their personal preference for data access.

When designing roles, how can you apply the principle of least privilege?

Create broad roles that cover many job functions to reduce the number of roles.

Use only built-in roles because they are predefined and secure.

Create granular roles that align with specific job functions and grant only necessary privileges.

Grant all privileges to a single role and assign it to all users.

What is the primary purpose of designing a role hierarchy in Snowflake?

To eliminate the need for object-level privileges.

To enable privilege inheritance and simplify the management of access rights.

To increase the number of roles available for assignment to users.

To ensure that every user has a unique role.

A company has two Snowflake accounts: a production account and a development account. The development team needs to query a table in the production account to build reports. The security team requires that the development account users authenticate with their own credentials and that the access be read-only. What should the architect configure?

Create a user in the production account with SELECT privileges and share the username and password with the development team.

Create a share in the production account, grant SELECT on the table to the share, and add the development account as a consumer.

Create a custom role in the production account and grant it to the development account's users.

Create a database in the development account and copy the production table into it using a data pipeline.

A data platform team manages a Snowflake account. They need to grant a group of data analysts the ability to create and manage their own warehouses, but they must NOT be able to create databases or manage users. Which privilege set should be granted to the analysts' custom role?

CREATE DATABASE and CREATE WAREHOUSE on the account.

Grant the SYSADMIN role to the analysts.

CREATE WAREHOUSE on the account, and USAGE on the databases they need to query.

CREATE USER and CREATE WAREHOUSE on the account.

SnowflakeSnowPro Advanced — Architect

Domain 1Objective 1

Design Account and Role Architecture ARA-C01 Practice Questions (Page 2)

Part of the Accounts and Security domain, which accounts for 26% of the ARA-C01 exam.

26questions here

6free pages

11concepts

26%of the exam

Questions 6–10

6foundation · easy
According to RBAC principles, how should users be assigned to roles in Snowflake?
Select an answer first
7foundation · easy
When designing roles, how can you apply the principle of least privilege?
Select an answer first
8foundation · easy
What is the primary purpose of designing a role hierarchy in Snowflake?
Select an answer first
9application · medium
A company has two Snowflake accounts: a production account and a development account. The development team needs to query a table in the production account to build reports. The security team requires that the development account users authenticate with their own credentials and that the access be read-only. What should the architect configure?
Select an answer first
10application · medium
A data platform team manages a Snowflake account. They need to grant a group of data analysts the ability to create and manage their own warehouses, but they must NOT be able to create databases or manage users. Which privilege set should be granted to the analysts' custom role?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ARA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “ARA-C01” is a trademark of its owner, used for identification only.