SNOWFLAKESnowflake SnowPro Advanced:Security Engineer
The SnowPro Advanced: Security Engineer certification validates your expertise in securing the Snowflake AI Data Cloud. It is designed for security professionals who architect and enforce data protection, identity and access controls, and compliance frameworks. Earning it demonstrates that you can safeguard Snowflake environments against evolving threats and align security practices with business objectives.
295 practice questions · Updated 2026-07-30
5Domains
12Objectives
93Concepts
295Questions
SNOWPRO-ADVANCED-SECURITY-ENGINEER Curriculum
Every domain, objective, and concept the SNOWPRO-ADVANCED-SECURITY-ENGINEER exam measures.
- Data Protection Principles
- Data Classification and Tagging
- Data Masking Policies
- Row-Level Security
- Column-Level Security
- Encryption and Key Management
- Access Control and Privileges
- Data Sharing and Marketplace Governance
- Data Retention and Time Travel
- Data Lineage and Auditing
- Compliance and Regulatory Frameworks
- Governance Automation and Monitoring
- Masking policy fundamentals
- Creating and applying masking policies
- Masking policy conditions and data types
- Row access policy fundamentals
- Creating and applying row access policies
- Row access policy evaluation and context functions
- Tagging fundamentals
- Creating and managing tags
- Tag-based masking and row access policies
- Policy and tag integration
- User Identity Lifecycle Management
- Authentication Mechanisms
- Access Control Models
- Role Hierarchy and Privilege Inheritance
- Secure User Provisioning and Deprovisioning
- Integration with External Identity Providers
- Session and Network Policies
- Key-Based Authentication
- OAuth and Token-Based Access
- Auditing and Monitoring User Access
- SSO configuration
- MFA enforcement
- OAuth integration
- Key pair authentication
- Authentication policy management
- Role hierarchy and inheritance
- Role assignment to users
- Role-based privilege management
- Role ownership and management
- Functional vs. custom roles
- Role-based access control best practices
- Audit Log Review
- Security Policy Monitoring
- Access Control Verification
- Compliance Reporting
- Alerting and Notification
- Identify regulatory frameworks
- Map requirements to Snowflake features
- Implement data protection controls
- Configure audit logging for compliance
- Manage data retention and privacy
- Demonstrate compliance through documentation
- ACCESS_HISTORY overview
- Querying ACCESS_HISTORY
- Interpreting ACCESS_HISTORY columns
- Using ACCESS_HISTORY for security auditing
- Account usage views overview
- Querying account usage views
- Combining ACCESS_HISTORY with account usage views
- Threat identification
- Risk assessment methodology
- Risk prioritization
- Risk mitigation strategies
- Risk documentation
- Incident Response Lifecycle
- Security Incident Detection in Snowflake
- Initial Triage and Assessment
- Containment Strategies
- Eradication and Remediation
- Recovery and Restoration
- Forensic Analysis and Evidence Collection
- Communication and Escalation
- Post-Incident Review and Lessons Learned
- Network policy fundamentals
- Creating and managing network policies
- Network policy rules and allowed/blocked IP lists
- Network policy precedence and inheritance
- Private connectivity overview
- Configuring AWS PrivateLink
- Configuring Azure Private Link
- Configuring Google Cloud Private Service Connect
- DNS and routing for private connectivity
- Troubleshooting network policies and private connectivity
- Snowflake AI/ML capabilities overview
- Anomaly detection with ML functions
- Predictive threat modeling
- Classification for security events
- Integration with external AI/ML tools
- Data preparation for AI/ML security analysis
- Secure deployment of AI/ML models
- Monitoring and auditing AI/ML usage
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for SNOWPRO-ADVANCED-SECURITY-ENGINEER, so none is invented.