Design and Enforce Data Protection, Privacy, and Governance Across Snowflake SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which regulatory framework specifically requires the protection of personal data of EU citizens?

   • ASOC 2
   • BPCI DSS
   • CHIPAA
   • DGDPR
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary function of a dynamic data masking policy in Snowflake?

   • ATo encrypt the column with a customer-managed key.
   • BTo alter the data at rest in the table to hide sensitive values.
   • CTo permanently delete sensitive data from the table.
   • DTo control the display of data at query time based on the user's role.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A multinational retail company has a single orders table in Snowflake. Regional sales managers should only see orders from their own region. The company uses a REGION column in the orders table, and each sales manager's role is named after their region (e.g., SALES_MANAGER_EMEA). The security engineer needs to enforce this restriction without creating multiple views or duplicating data. What should the security engineer do?

   • ACreate a masking policy on the REGION column to hide the region value from unauthorized roles.
   • BCreate a view for each region that filters by REGION, and grant each sales manager role access to their corresponding view.
   • CCreate a separate table for each region and grant each sales manager role access to only their region's table.
   • DCreate a row access policy that uses the CURRENT_ROLE() function to compare against the REGION column, and apply it to the orders table.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of data lineage in Snowflake?

   • ATo automatically back up data.
   • BTo track the flow of data from its source to its destination, including transformations.
   • CTo encrypt data in transit.
   • DTo monitor query performance.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which SQL statement is used to create a dynamic data masking policy in Snowflake?

   • ACREATE ACCESS POLICY
   • BCREATE SECURITY POLICY
   • CCREATE DATA POLICY
   • DCREATE MASKING POLICY
   Reveal Solution Discussion Select an answer first