A security engineer is reviewing potential threats to a Snowflake environment. Which scenario is an example of an insider threat?

A phishing email tricks a user into revealing their password to an external party.

A user with legitimate credentials exfiltrates sensitive data from a shared table.

A misconfigured network policy allows public access to a Snowflake account.

An attacker exploits a zero-day vulnerability in Snowflake's cloud infrastructure.

After a risk assessment, a security engineer needs to document the findings for management. Which documentation approach is most effective?

A presentation with only the mitigation steps

A risk register that lists each risk, its likelihood, impact, and recommended mitigation

A detailed technical report with all raw logs and system configurations

An email summarizing the top three risks without details

What is the primary purpose of documenting risk assessment findings?

To satisfy legal requirements only

To store data in a secure location

To replace the need for ongoing monitoring

To provide a clear record that supports decision-making and accountability

Snowflake SnowPro Advanced:Security Engineer

Domain 4Objective 1

Assess Threats and Risks SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Threat and Risk Management domain, which makes up ~27% of our current practice bank.

23questions here

5free pages

5concepts

Questions 6–10

6application · medium
A security engineer is reviewing Snowflake audit logs and notices that a user has been querying sensitive data from a new IP address that is not in the allowed network policy. The user has a valid role and the queries are during business hours. What is the most likely threat?
Select an answer first
7foundation · easy
During a threat assessment, a security engineer identifies that a Snowflake account has a network policy that allows access from any IP address. Which type of threat does this represent?
Select an answer first
8foundation · easy
A security engineer is reviewing potential threats to a Snowflake environment. Which scenario is an example of an insider threat?
Select an answer first
9application · medium
After a risk assessment, a security engineer needs to document the findings for management. Which documentation approach is most effective?
Select an answer first
10foundation · easy
What is the primary purpose of documenting risk assessment findings?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

Assess Threats and Risks SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

A security engineer is reviewing Snowflake audit logs and notices that a user has been querying sensitive data from a new IP address that is not in the allowed network policy. The user has a valid role and the queries are during business hours. What is the most likely threat?

During a threat assessment, a security engineer identifies that a Snowflake account has a network policy that allows access from any IP address. Which type of threat does this represent?

A security engineer is reviewing potential threats to a Snowflake environment. Which scenario is an example of an insider threat?

After a risk assessment, a security engineer needs to document the findings for management. Which documentation approach is most effective?

What is the primary purpose of documenting risk assessment findings?

Keep studying — Threat and Risk Management