Design and Enforce Data Protection, Privacy, and Governance Across Snowflake SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of column-level security in Snowflake?

   • ATo replicate columns to another region for disaster recovery.
   • BTo improve query performance by indexing columns.
   • CTo protect sensitive columns by restricting access to authorized roles.
   • DTo compress data in columns to save storage.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security auditor needs to produce a report showing which users accessed a specific table containing financial data over the past 30 days. The report must include the query text, the user, and the timestamp. What should the security engineer use to generate this report?

   • AEnable audit logging on the table and query the audit log for the past 30 days.
   • BQuery the ACCOUNT_USAGE.QUERY_HISTORY view, filtering by the table name and the date range.
   • CQuery the INFORMATION_SCHEMA.QUERY_HISTORY view, filtering by the table name and the date range.
   • DUse the GET_QUERY_HISTORY function to retrieve the query history for the past 30 days.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which system function can be used to monitor the number of masking policies applied in Snowflake?

   • APOLICY_REFERENCES
   • BSYSTEM$TYPEOF
   • CCURRENT_ACCOUNT
   • DSYSTEM$CLUSTERING_INFORMATION
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In Snowflake, what is the purpose of the OWNERSHIP privilege?

   • AIt grants full control over an object, including the ability to grant privileges to other roles.
   • BIt allows a role to create new objects in a database.
   • CIt allows a role to view data in a table but not modify it.
   • DIt allows a role to monitor query performance.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a row access policy on a table that restricts access based on the user's department, which is stored in a mapping table. The policy uses a JOIN between the data table and the mapping table. Recently, some users reported that they are seeing an error when querying the table. What is the most likely cause of this error?

   • AThe row access policy is using CURRENT_USER() instead of CURRENT_ROLE(), causing a mismatch.
   • BThe row access policy is not applied to the mapping table, so the JOIN returns incorrect results.
   • CThe users do not have SELECT privilege on the data table, so the query fails.
   • DThe mapping table is not accessible to the users' roles, so the JOIN fails.
   Reveal Solution Discussion Select an answer first