Apply Masking and Row Access Policies DEA-C02 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   At what point during query execution does a masking policy affect the data returned to a user?

   • ADuring query compilation, before any data is read
   • BDuring data ingestion, before the data is stored
   • CAfter query results are written to a result cache
   • DAt query time, when the column is read and returned in the result set
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of a mapping table in a row access policy?

   • ATo define the data types of the columns
   • BTo store the masked values for each column
   • CTo map user roles to the rows they are allowed to see
   • DTo store the encryption keys for the table
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of a masking policy in Snowflake?

   • ATo control column-level data visibility at query time based on conditions
   • BTo restrict which users can access the table object itself
   • CTo filter rows from query results based on user context
   • DTo encrypt data at rest in the storage layer
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A data engineer needs to understand which masking and row access policies are currently applied to a specific table. Which command or function should the engineer use to get this information?

   • ASELECT SYSTEM$MASKING_POLICY_REFERENCE('TABLE', 'DB.SCHEMA.MY_TABLE');
   • BSHOW MASKING POLICIES IN TABLE my_table;
   • CDESCRIBE TABLE my_table;
   • DSELECT * FROM INFORMATION_SCHEMA.POLICIES WHERE TABLE_NAME = 'MY_TABLE';
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services firm has a 'transactions' table. They want to allow only the 'COMPLIANCE' role to see all rows, while other roles should see only rows where 'is_approved' is TRUE. The data engineer decides to use a row access policy. What should the engineer include in the policy's body?

   • ACASE WHEN is_approved THEN TRUE ELSE CURRENT_ROLE() = 'COMPLIANCE' END
   • BCURRENT_ROLE() = 'COMPLIANCE' OR is_approved = FALSE
   • CCURRENT_ROLE() = 'COMPLIANCE' AND is_approved
   • DCASE WHEN CURRENT_ROLE() = 'COMPLIANCE' THEN TRUE ELSE is_approved END
   Reveal Solution Discussion Select an answer first