A data engineer is using the PUT command to upload files to an internal stage. The engineer wants to ensure that the files are encrypted with a specific key that the company controls. What should the engineer do?

Accept that internal stage files are encrypted with Snowflake-managed keys and cannot be encrypted with a customer-managed key.

Use an external stage with client-side encryption instead of an internal stage.

Enable Tri-Secret Secure on the account to use the customer-managed key for internal stage encryption.

Specify the ENCRYPTION parameter in the PUT command with the customer-managed key.

What must be ensured when unloading data from Snowflake to an external location?

Data is encrypted only if the user specifies a key

Data is encrypted in transit and at rest in the external location

Data is encrypted only in transit, not at rest

Data is not encrypted during unload

When loading encrypted data into Snowflake, what does Snowflake do?

Requires the data to be unencrypted before loading

Decrypts the data and re-encrypts it using Snowflake's encryption

Stores the data in its original encrypted form

Only loads data that is encrypted with Snowflake-managed keys

How do network policies help prevent unauthorized data egress?

By blocking all outbound network connections

By encrypting all data leaving the account

By restricting access to the account from untrusted IP addresses

By monitoring query results for sensitive data

SnowflakeSnowPro Advanced — Architect

Domain 1Objective 3

Implement Data Protection and Encryption ARA-C01 Practice Questions (Page 2)

Part of the Accounts and Security domain, which accounts for 26% of the ARA-C01 exam.

29questions here

6free pages

10concepts

26%of the exam

Questions 6–10

6foundation · easy
Which encryption algorithm does Snowflake use to encrypt data at rest?
Select an answer first
7application · medium
A data engineer is using the PUT command to upload files to an internal stage. The engineer wants to ensure that the files are encrypted with a specific key that the company controls. What should the engineer do?
Select an answer first
8foundation · easy
What must be ensured when unloading data from Snowflake to an external location?
Select an answer first
9foundation · easy
When loading encrypted data into Snowflake, what does Snowflake do?
Select an answer first
10foundation · easy
How do network policies help prevent unauthorized data egress?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ARA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “ARA-C01” is a trademark of its owner, used for identification only.