Assess Threats and Risks SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–23

1. 21application · medium

   A security engineer notices that a Snowflake user has been granted the ability to create storage integrations, but the user's role does not require this privilege. The engineer suspects this is a misconfiguration. Which action is the most appropriate to address this risk?

   • AImmediately revoke the privilege from the user
   • BDocument the finding and schedule a review of all user privileges
   • CRevoke the privilege and review the user's role assignments to ensure least privilege
   • DIgnore the issue because the user is trusted
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A security engineer is applying a structured risk assessment methodology to evaluate threats to a Snowflake environment. Which step is part of this methodology?

   • ADocumenting the assessment results in a spreadsheet without further analysis
   • BDetermining the likelihood and impact of each identified threat
   • CDeleting all data that is not critical to the business
   • DImplementing a security control for every identified threat immediately
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   A company has identified a risk of data exfiltration via external stages. Which combination of controls would provide the most comprehensive mitigation?

   • AOnly restrict external stage creation
   • BRestrict external stage creation to specific roles and monitor stage usage
   • CDisable all external stages
   • DOnly monitor external stage usage
   Reveal Solution Discussion Select an answer first