Manage Access Control for Data Pipelines DEA-C02 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A team uses a session policy to restrict the network locations from which users can connect to Snowflake. A data pipeline runs via a task that uses a service account. The service account's sessions are being blocked by the session policy because the pipeline's IP address is not in the allowed list. What is the most appropriate way to resolve this while maintaining security?

   • ARemove the session policy from the service account's user.
   • BAdd the pipeline's IP address to the allowed list in the session policy.
   • CChange the pipeline to use a different authentication method that bypasses session policies.
   • DCreate a new session policy with no restrictions and attach it to the service account.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   To audit which users executed queries against a pipeline's underlying tables, which Snowflake view or table should a data engineer query?

   • AACCOUNT_USAGE.STAGES
   • BINFORMATION_SCHEMA.TASK_HISTORY
   • CINFORMATION_SCHEMA.TABLES
   • DACCOUNT_USAGE.QUERY_HISTORY
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A pipeline uses a stored procedure to perform multiple SQL operations. What is a key security benefit of using a stored procedure for this purpose?

   • AIt allows users to execute complex logic without needing direct table privileges
   • BIt prevents the procedure from being modified by anyone
   • CIt automatically encrypts all data processed by the procedure
   • DIt bypasses all access control checks
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A team has a task that loads data into a table. The task is owned by role LOAD_OWNER. A new role, QA, needs to be able to suspend and resume the task for testing purposes, but must NOT be able to modify the task's SQL or schedule. What is the minimum privilege to grant to QA?

   • AOWNERSHIP on the task.
   • BMONITOR on the task.
   • COPERATE on the task.
   • DEXECUTE on the task.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A pipeline uses a stored procedure that dynamically constructs and executes SQL based on input parameters. The procedure is owned by role PROC_OWNER. The team wants to allow role ETL_JOB to call this procedure, but the procedure must run with the privileges of PROC_OWNER, not ETL_JOB, so that ETL_JOB does not need direct access to the underlying tables. What must be configured?

   • AGrant EXECUTE on the procedure to ETL_JOB and also grant SELECT on all underlying tables to ETL_JOB.
   • BCreate the procedure with EXECUTE AS CALLER and grant USAGE to ETL_JOB.
   • CGrant OWNERSHIP on the procedure to ETL_JOB so it can run it with full privileges.
   • DGrant USAGE on the procedure to ETL_JOB and ensure the procedure is created with EXECUTE AS OWNER (the default).
   Reveal Solution Discussion Select an answer first