Implement Data Protection and Encryption ARA-C01 Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   How does row-level security complement encryption in Snowflake?

   • AIt replaces encryption for sensitive data
   • BIt encrypts individual rows with different keys
   • CIt prevents data from being exported
   • DIt restricts access to specific rows based on user attributes, adding a granular access control layer
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A Snowflake administrator is explaining the encryption key hierarchy to a new security analyst. Which statement correctly describes the hierarchy?

   • AA single root key encrypts all table master keys directly.
   • BEach table has a unique table master key that is encrypted by the account master key.
   • CThe account master key is derived from the table master keys.
   • DRoot keys are rotated every time a table master key is rotated.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In Tri-Secret Secure, which keys are combined to protect the account master key?

   • AOne Snowflake-managed key and two customer-managed keys
   • BTwo Snowflake-managed keys and one customer-managed key
   • CThree Snowflake-managed keys
   • DThree customer-managed keys from different cloud providers
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is client-side encryption for internal stages?

   • AEncryption of the network connection between client and Snowflake
   • BEncryption of the client's local storage
   • CEncryption performed by the client before uploading files to the stage
   • DEncryption performed by Snowflake after the file is uploaded
   Reveal Solution Discussion Select an answer first