Manage Roles and Role-Based Access Control COF-C03 Practice Questions (Page 4)

Questions 16–20

1. 16application · easy

   A user with the ACCOUNTADMIN role needs to revoke the CREATE TABLE privilege from the DEVELOPER role on the DEV_DB database. What is the correct command?

   • AREVOKE ALL ON DATABASE DEV_DB FROM ROLE DEVELOPER;
   • BALTER DATABASE DEV_DB SET CREATE TABLE = FALSE;
   • CREVOKE CREATE TABLE ON DATABASE DEV_DB FROM ROLE DEVELOPER;
   • DDROP ROLE DEVELOPER;
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A role named ANALYST is granted to a role named DATA_SCIENTIST. What does the DATA_SCIENTIST role inherit from the ANALYST role?

   • AOnly the privileges that are explicitly granted to DATA_SCIENTIST.
   • BAll privileges that have been granted to the ANALYST role.
   • COnly the privileges on objects owned by the ANALYST role.
   • DNo privileges, because roles cannot inherit from other roles.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has separate teams for data engineering and data science. The data engineering team needs to create and manage tables in the ANALYTICS schema, while the data science team needs to query those tables. The security team wants to minimize privilege management overhead. You create a role called DATA_ENGINEER with the CREATE TABLE and OWNERSHIP privileges on the ANALYTICS schema. Which additional role configuration should you implement?

   • AGrant the DATA_SCIENCE role to the data engineering team so they can share the tables.
   • BMake DATA_SCIENCE a child role of DATA_ENGINEER.
   • CGrant the DATA_SCIENCE role the same privileges as DATA_ENGINEER on the ANALYTICS schema.
   • DCreate a DATA_SCIENCE role and grant it the USAGE privilege on the ANALYTICS schema and SELECT on the tables owned by DATA_ENGINEER.
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A user with the ACCOUNTADMIN role needs to revoke the OWNERSHIP privilege on a table from the DATA_ENGINEER role and grant it to the DATA_SCIENCE role. What is the correct approach?

   • ARun ALTER TABLE SALES SET OWNER = DATA_SCIENCE;
   • BRun GRANT OWNERSHIP ON TABLE SALES TO ROLE DATA_SCIENCE;
   • CRun REVOKE OWNERSHIP ON TABLE SALES FROM ROLE DATA_ENGINEER; then GRANT OWNERSHIP ON TABLE SALES TO ROLE DATA_SCIENCE;
   • DRun DROP TABLE SALES AND RECREATE IT AS DATA_SCIENCE;
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a special capability of the ACCOUNTADMIN role in Snowflake?

   • AIt can only manage warehouses, not other objects.
   • BIt is automatically granted to every user in the account.
   • CIt can only view data but not modify it.
   • DIt can manage all objects and roles in the account, including creating and dropping roles.
   Reveal Solution Discussion Select an answer first