Apply Masking and Row Access Policies DEA-C02 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement is used to remove a masking policy from a column?

   • ADROP MASKING POLICY ... ON COLUMN
   • BDELETE MASKING POLICY ... FROM COLUMN
   • CALTER TABLE ... UNSET MASKING POLICY
   • DREVOKE MASKING POLICY ... ON COLUMN
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A healthcare company stores patient data in a Snowflake table. The compliance team requires that the 'email' column be masked for all roles except 'PATIENT_ADMIN'. The masking must be applied at the column level without altering the underlying data. Which action should the data engineer take?

   • ACreate a masking policy with a conditional expression that returns the email for PATIENT_ADMIN and a masked value for all other roles, then apply it to the email column using ALTER TABLE.
   • BUse a row access policy on the table to filter out rows where the email is sensitive, so only PATIENT_ADMIN sees any email values.
   • CGrant SELECT on the email column only to PATIENT_ADMIN and revoke it from all other roles.
   • DCreate a view that selects the email column and apply a masking policy to the view, then replace the original table with the view.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A data engineer is optimizing a frequently run analytical query on a large table that has both a masking policy and a row access policy. The query currently takes longer than expected. The engineer suspects the policies are causing performance degradation. Which action is most likely to improve query performance without compromising security?

   • AUse the CLUSTERING KEY on the columns referenced in the policies.
   • BSimplify the policy bodies to use only context functions and avoid subqueries.
   • CApply the policies to a view instead of the base table.
   • DRemove the row access policy and rely solely on the masking policy.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A data engineer is testing a new masking policy and a row access policy in a development environment. The engineer wants to verify that a specific user, 'analyst_john', sees the correct data. The engineer has the ACCOUNTADMIN role. Which set of steps should the engineer take to test the policies as 'analyst_john'?

   • AUse the 'SET SUBJECT = analyst_john' command to impersonate the user.
   • BRun the query with the 'AS USER analyst_john' clause.
   • CGrant the ACCOUNTADMIN role to 'analyst_john' and then run queries as that user.
   • DUse the 'USE ROLE' command to switch to the role that 'analyst_john' has, then run queries to see the results.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of the conditional expression in a masking policy definition?

   • ATo define the data type of the column
   • BTo specify the encryption algorithm for the column
   • CTo determine which rows are visible to the user
   • DTo decide whether to mask or reveal the column value based on user context
   Reveal Solution Discussion Select an answer first