A security engineer is investigating a potential data breach. They have identified a user who executed a query that accessed sensitive data, but the user claims they were not logged in at that time. Which additional evidence would be most useful to verify the user's claim?

Check the ACCESS_HISTORY for the user's access to other tables.

Check the GRANTS_TO_USERS to see if the user had the necessary privileges.

Check the QUERY_HISTORY for the user's other queries around that time.

Check the LOGIN_HISTORY for the user's session around the time of the query.

During a routine audit, you notice that a user with the SECURITYADMIN role has been granted the MANAGE GRANTS privilege. This is not documented in your access control policy. What is the most appropriate first step?

Review the audit logs to determine when and by whom the privilege was granted, and whether it was approved.

Ignore it because SECURITYADMIN is a trusted role.

Revoke the MANAGE GRANTS privilege immediately and document the change.

Escalate to the account administrator to change the user's password.

Snowflake SnowPro Advanced:Security Engineer

Domain 3Objective 1

Audit and Monitor Security Policies and Controls SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Security Auditing and Compliance domain, which makes up ~22% of our current practice bank.

21questions here

5free pages

5concepts

Questions 6–10

6foundation · easy
Which Snowflake object is used to define a notification action that can be triggered by an alert?
Select an answer first
7foundation · easy
Which Snowflake object is used to define a set of allowed IP addresses and ranges for network access control, and can be applied at the account or user level?
Select an answer first
8expert · medium
A security engineer is investigating a potential data breach. They have identified a user who executed a query that accessed sensitive data, but the user claims they were not logged in at that time. Which additional evidence would be most useful to verify the user's claim?
Select an answer first
9application · medium
During a routine audit, you notice that a user with the SECURITYADMIN role has been granted the MANAGE GRANTS privilege. This is not documented in your access control policy. What is the most appropriate first step?
Select an answer first
10foundation · easy
A security engineer needs to monitor the enforcement of network security policies across Snowflake sessions. Which view provides information about the network policy applied to each session?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

Audit and Monitor Security Policies and Controls SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

Which Snowflake object is used to define a notification action that can be triggered by an alert?

Which Snowflake object is used to define a set of allowed IP addresses and ranges for network access control, and can be applied at the account or user level?

A security engineer is investigating a potential data breach. They have identified a user who executed a query that accessed sensitive data, but the user claims they were not logged in at that time. Which additional evidence would be most useful to verify the user's claim?

During a routine audit, you notice that a user with the SECURITYADMIN role has been granted the MANAGE GRANTS privilege. This is not documented in your access control policy. What is the most appropriate first step?

A security engineer needs to monitor the enforcement of network security policies across Snowflake sessions. Which view provides information about the network policy applied to each session?

Keep studying — Security Auditing and Compliance