Design Account and Role Architecture ARA-C01 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a primary reason to design a multi-account architecture in Snowflake?

   • ATo increase the maximum number of warehouses available in a single account.
   • BTo simplify user management by having a single set of users across all environments.
   • CTo isolate workloads, environments, or business units from each other.
   • DTo reduce the total cost of Snowflake usage.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A contractor is leaving a company and their Snowflake user account must be deactivated. The company policy requires that the user's access be revoked immediately, but the user's historical query activity must remain available for audit purposes. What should the architect do?

   • ARemove all role grants from the user but leave the user active.
   • BDrop the user account.
   • CSuspend the user account.
   • DChange the user's password to a random value.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In Snowflake, what is the effect of granting a role to another role?

   • AThe granted role inherits all privileges of the granting role.
   • BThe granting role inherits all privileges of the granted role.
   • CThe two roles share privileges equally.
   • DThe granted role is disabled until the granting role is used.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When a user leaves the organization, what is the recommended action regarding their Snowflake user account?

   • ADelete the user account immediately to free up resources.
   • BLeave the user account active but change the password.
   • CDeactivate the user account to prevent access while preserving audit history.
   • DRemove all roles from the user but keep the account active.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has a Snowflake account with a role hierarchy where the ANALYST role inherits from the DATA_ENGINEER role. The DATA_ENGINEER role has SELECT on the SALES database, and the ANALYST role has SELECT on the MARKETING database. A new analyst user is granted the ANALYST role. Which databases can the new user access?

   • ANeither database, because the user must be granted both roles directly.
   • BBoth the SALES and MARKETING databases.
   • COnly the SALES database.
   • DOnly the MARKETING database.
   Reveal Solution Discussion Select an answer first