Manage Roles and Role-Based Access Control COF-C03 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A user with the ACCOUNTADMIN role needs to transfer ownership of a stored procedure to a developer role so the developer can manage it. What must the ACCOUNTADMIN do?

   • ARun GRANT OWNERSHIP ON PROCEDURE ... TO ROLE DEVELOPER;
   • BRun DROP PROCEDURE ... AND RECREATE IT AS DEVELOPER;
   • CRun ALTER PROCEDURE ... SET OWNER = DEVELOPER;
   • DRun GRANT USAGE ON PROCEDURE ... TO ROLE DEVELOPER;
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a recommended best practice for role design in Snowflake?

   • ACreate a separate role for every user in the account.
   • BGrant privileges directly to individual users to avoid role complexity.
   • CUse only the ACCOUNTADMIN role for all users to simplify administration.
   • DCreate functional roles based on job responsibilities and grant those roles to users.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the effect of revoking a privilege from a role in Snowflake?

   • AThe role keeps the privilege until it is explicitly granted again.
   • BThe role loses the privilege only for new queries, but existing queries continue to run.
   • CThe role loses the privilege only after the current session ends.
   • DThe role immediately loses the ability to perform the operation covered by that privilege.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is it a best practice to avoid granting roles directly to users in Snowflake?

   • AIt causes performance degradation.
   • BIt is not allowed in Snowflake.
   • CIt prevents the use of the ACCOUNTADMIN role.
   • DIt makes privilege management and auditing more difficult.
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A company has a role hierarchy where the ANALYST role is a parent of the JUNIOR_ANALYST role. The ANALYST role has SELECT on the SALES table. The JUNIOR_ANALYST role has no explicit privileges. A user is granted only the JUNIOR_ANALYST role. What privileges does this user have on the SALES table?

   • ASELECT, but only if the user also has the ANALYST role active.
   • BSELECT, because JUNIOR_ANALYST inherits privileges from ANALYST.
   • CNo privileges, because the user was not granted ANALYST directly.
   • DNo privileges, because JUNIOR_ANALYST has no explicit grants.
   Reveal Solution Discussion Select an answer first