How does Snowflake manage encryption keys for external stages?

Snowflake automatically generates and manages all keys

Keys are managed by the cloud storage provider or provided by the customer

Keys are stored in Snowflake's internal key store

Keys are not used for external stages

A security administrator is investigating a potential data breach. They suspect that a user exfiltrated data by unloading it to an external stage. Which Snowflake feature or view would help confirm this activity?

Review the STAGE_STORAGE_USAGE view to see if the external stage was used.

Check the network policy logs to see if the user's IP address was blocked.

Use the MASKING_POLICY_REFERENCES view to see if the user had access to unmasked data.

Query the QUERY_HISTORY view to look for COPY INTO commands executed by the user.

How does Snowflake handle key rotation for its encryption keys?

Keys are never rotated unless the customer requests it through support

Keys must be manually rotated by the account administrator using the ALTER KEY command

Keys are rotated only when a new table is created

Keys are rotated automatically on a regular schedule without requiring user action

Which external key management services can be used with Snowflake's customer-managed keys (CMK)?

AWS KMS, Azure Key Vault, and GCP KMS

Any KMS that supports the KMIP protocol

HashiCorp Vault, Thales, and Gemalto

What is the primary purpose of Tri-Secret Secure in Snowflake?

To allow customers to fully manage all encryption keys without Snowflake involvement

To encrypt data in transit using three different protocols

To provide a backup key in case the primary key is lost

To add an additional layer of security by combining a customer-managed key with Snowflake-managed keys

SnowflakeSnowPro Advanced — Architect

Domain 1Objective 3

Implement Data Protection and Encryption ARA-C01 Practice Questions (Page 4)

Part of the Accounts and Security domain, which accounts for 26% of the ARA-C01 exam.

29questions here

6free pages

10concepts

26%of the exam

Questions 16–20

16foundation · easy
How does Snowflake manage encryption keys for external stages?
Select an answer first
17expert · medium
A security administrator is investigating a potential data breach. They suspect that a user exfiltrated data by unloading it to an external stage. Which Snowflake feature or view would help confirm this activity?
Select an answer first
18foundation · easy
How does Snowflake handle key rotation for its encryption keys?
Select an answer first
19foundation · easy
Which external key management services can be used with Snowflake's customer-managed keys (CMK)?
Select an answer first
20foundation · easy
What is the primary purpose of Tri-Secret Secure in Snowflake?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ARA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “ARA-C01” is a trademark of its owner, used for identification only.