Design and Enforce Data Protection, Privacy, and Governance Across Snowflake SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A data provider wants to list a dataset on the Snowflake Marketplace. The dataset contains some columns with personally identifiable information (PII) that should not be shared with consumers. The provider wants to ensure that consumers never see the PII columns, even if they have the ability to create views or copy data. What should the provider do before publishing the listing?

   • AApply a masking policy to the PII columns in the source table and list the table on the Marketplace.
   • BCreate a separate table with only the non-PII columns and list that table on the Marketplace.
   • CGrant the consumer role only SELECT privileges on the non-PII columns and list the table on the Marketplace.
   • DCreate a secure view that excludes the PII columns and list the secure view on the Marketplace.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of Snowflake Time Travel?

   • ATo permanently delete data after a specified period.
   • BTo encrypt data at rest.
   • CTo replicate data to another region.
   • DTo access historical data from a specified point in time within the retention period.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the default encryption method for data at rest in Snowflake?

   • AAES-256 with Snowflake-managed keys
   • BNo encryption is enabled by default
   • CRSA-2048 with customer-managed keys
   • DTriple DES with Snowflake-managed keys
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which compliance framework is specifically designed for organizations that handle credit card information?

   • AISO 27001
   • BHIPAA
   • CGDPR
   • DPCI DSS
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A SaaS company is subject to GDPR, which requires that personal data be deleted upon request. The company uses Snowflake's Time Travel and Fail-safe features for data recovery. The data protection officer (DPO) is concerned that Time Travel and Fail-safe may retain personal data beyond the required deletion timeframe. What should the security engineer configure to ensure that deleted personal data is not recoverable after the GDPR-mandated deletion deadline?

   • ASet the data retention time to 1 day and rely on the GDPR 30-day response window to delete data before the Time Travel window expires.
   • BSet the data retention time to 0 days for tables containing personal data, which disables Time Travel and Fail-safe for those tables.
   • CCreate a masking policy on the personal data columns to prevent access after the deletion deadline.
   • DUse the PURGE parameter in the DELETE or DROP command to immediately and permanently remove the data, bypassing Time Travel and Fail-safe.
   Reveal Solution Discussion Select an answer first