Assess Threats and Risks SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A security engineer sets up alerts to notify the team when unusual login activity is detected in Snowflake. Which type of control is this?

   • ADetective control
   • BPreventive control
   • CCorrective control
   • DDeterrent control
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security engineer at a healthcare analytics company is reviewing Snowflake account activity. They notice that a large volume of data was exported from a production database to a personal external stage during non-business hours, using credentials of a data analyst who is on leave. The export was not part of any scheduled job. Which type of threat does this scenario primarily represent?

   • AMisconfiguration
   • BExternal attack via compromised credentials
   • CDenial of service
   • DInsider threat
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has identified a risk of unauthorized data access via a shared role. Which mitigation strategy is a corrective control?

   • ADocument the risk in the risk register
   • BRevoke the shared role from users who no longer need it
   • CSet up alerts for unusual access patterns
   • DImplement a policy to review role assignments quarterly
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security engineer has identified two risks: Risk A has a high likelihood and high impact, while Risk B has a low likelihood and low impact. According to risk prioritization principles, which risk should be addressed first?

   • ARisk B, because low likelihood risks are always more dangerous
   • BRisk B, because it is easier to mitigate
   • CBoth risks simultaneously, because all risks are equal
   • DRisk A, because it has a higher overall risk level
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team is evaluating the risk of a Snowflake account being compromised due to a lack of MFA. They estimate that the likelihood of a successful attack is low because the account is only accessible from a restricted network, but the impact would be high because the account has access to sensitive data. How should this risk be classified?

   • ALow risk because the likelihood is low
   • BHigh risk because the impact is high
   • CMedium risk because the likelihood is low but the impact is high
   • DNo risk because the network is restricted
   Reveal Solution Discussion Select an answer first