Apply Data Governance Features Including Masking and Row Access Policies COF-C03 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A Snowflake administrator has a row access policy on a table that allows users to see only rows where their role matches the DEPARTMENT column. The policy uses a mapping table that lists which roles can access which departments. The administrator needs to add a new department and grant access to a new role. What is the most efficient way to update the policy?

   • ACreate a new row access policy and apply it to the table, overriding the old one.
   • BAlter the row access policy to add a new condition for the new role.
   • CInsert the new role and department into the mapping table; the policy will automatically reflect the change.
   • DDrop the policy and recreate it with the new role included.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which SQL command is used to apply a masking policy to a column?

   • AALTER TABLE ... SET MASKING POLICY
   • BCREATE MASKING POLICY
   • CGRANT MASKING POLICY
   • DALTER TABLE ... ADD COLUMN
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What must you do before dropping a masking policy that is currently applied to a column?

   • ADrop the table
   • BGrant the policy to another role
   • CUnset the policy from the column
   • DRecreate the policy with a new name
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How can Snowflake tags be used alongside masking policies?

   • ATags can be used to classify columns, and masking policies can be applied based on those tags
   • BTags replace masking policies
   • CTags can automatically apply masking policies to columns
   • DTags are only for row access policies
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A Snowflake account has a masking policy on a column and a row access policy on the same table. The masking policy is set to return the original value for the role 'ADMIN' and a masked value for all other roles. The row access policy is set to return only rows where the user's role is in a list. A user with the role 'ANALYST' queries the table. What will the user see?

   • AOnly the allowed rows, with the column value visible because the row access policy grants access.
   • BNo rows because the combination of policies denies all access.
   • CAll rows, with the column masked because the user is not ADMIN.
   • DOnly the rows allowed by the row access policy, with the column masked because the user is not ADMIN.
   Reveal Solution Discussion Select an answer first