A security team is assessing the risk of a Snowflake account being compromised via a phishing attack. They have implemented MFA for all users. How does this control affect the risk assessment?

It reduces the impact of the risk

It reduces the likelihood of the risk

It eliminates the risk entirely

It has no effect on the risk assessment

A security team is assessing the risk of a Snowflake account where a service account has been granted ACCOUNTADMIN privileges and is used by an external ETL tool. The team is evaluating the likelihood of this privilege being abused. Which factor is most relevant to determining the likelihood of abuse?

The number of rows in the largest table

The strength of the password and whether MFA is enforced

The geographic location of the Snowflake account

The number of users in the account

A security engineer is prioritizing risks for a Snowflake environment. They have identified the following risks: (1) a misconfigured network policy allowing all IP addresses, (2) a lack of data masking on a test database containing synthetic data, (3) an unused user account with ACCOUNTADMIN privileges, and (4) a storage integration with overly broad permissions. Which risk should be prioritized first?

Storage integration with overly broad permissions

Unused user account with ACCOUNTADMIN privileges

Lack of data masking on test database

After a risk assessment, a security engineer needs to document the findings. Which element is essential for making the documentation actionable?

The SQL queries used to identify the risks

The names of all users in the account

A clear owner and due date for each mitigation action

A list of all Snowflake features

A company uses Snowflake to store financial data. They have identified a risk of unauthorized access due to weak passwords. Which mitigation strategy is a detective control?

Set up alerts for failed login attempts

Revoke access for users who leave the company

Enforce a password policy that requires complex passwords

Snowflake SnowPro Advanced:Security Engineer

Domain 4Objective 1

Assess Threats and Risks SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Threat and Risk Management domain, which makes up ~27% of our current practice bank.

23questions here

5free pages

5concepts

Questions 11–15

11application · medium
A security team is assessing the risk of a Snowflake account being compromised via a phishing attack. They have implemented MFA for all users. How does this control affect the risk assessment?
Select an answer first
12application · medium
A security team is assessing the risk of a Snowflake account where a service account has been granted ACCOUNTADMIN privileges and is used by an external ETL tool. The team is evaluating the likelihood of this privilege being abused. Which factor is most relevant to determining the likelihood of abuse?
Select an answer first
13application · medium
A security engineer is prioritizing risks for a Snowflake environment. They have identified the following risks: (1) a misconfigured network policy allowing all IP addresses, (2) a lack of data masking on a test database containing synthetic data, (3) an unused user account with ACCOUNTADMIN privileges, and (4) a storage integration with overly broad permissions. Which risk should be prioritized first?
Select an answer first
14application · medium
After a risk assessment, a security engineer needs to document the findings. Which element is essential for making the documentation actionable?
Select an answer first
15application · medium
A company uses Snowflake to store financial data. They have identified a risk of unauthorized access due to weak passwords. Which mitigation strategy is a detective control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

Assess Threats and Risks SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

A security team is assessing the risk of a Snowflake account being compromised via a phishing attack. They have implemented MFA for all users. How does this control affect the risk assessment?

After a risk assessment, a security engineer needs to document the findings. Which element is essential for making the documentation actionable?

A company uses Snowflake to store financial data. They have identified a risk of unauthorized access due to weak passwords. Which mitigation strategy is a detective control?

Keep studying — Threat and Risk Management