Implement and Manage User Identity and Access Control Mechanisms SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of federated authentication (SSO) in Snowflake?

   • ATo allow users to authenticate using their corporate identity provider credentials
   • BTo encrypt data in transit
   • CTo automatically create users in Snowflake
   • DTo manage roles and privileges
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   Your organization uses Okta for SSO and SCIM provisioning. You have a group of external consultants who need temporary access to Snowflake for 30 days. You want to automate the creation and deactivation of these users. What is the best approach?

   • ACreate a group in Okta for the consultants, assign the group to the Snowflake app, and set a group expiration policy in Okta.
   • BCreate a role for consultants and grant it to the users, then revoke the role after 30 days.
   • CCreate the users manually in Snowflake and set a password policy that expires after 30 days.
   • DUse a Snowflake task to disable users after 30 days based on their creation date.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which Snowflake role is granted the highest level of privileges and should be protected with strict access controls?

   • APUBLIC
   • BACCOUNTADMIN
   • CSECURITYADMIN
   • DSYSADMIN
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Your organization uses Azure AD for SSO and wants to enable federated authentication for Snowflake. You have configured the SSO integration in Snowflake and the enterprise application in Azure AD. Users can log in via SSO, but they are not prompted for MFA. What should you do to enforce MFA?

   • AConfigure conditional access policies in Azure AD to require MFA for the Snowflake application.
   • BCreate a network policy that blocks non-corporate IPs and rely on that for security.
   • CAsk users to enable MFA on their Snowflake accounts manually.
   • DEnable MFA in Snowflake by setting the REQUIRE_MFA parameter to TRUE.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which protocol is used to integrate Snowflake with an external identity provider for federated authentication?

   • AKerberos
   • BLDAP
   • CSAML 2.0
   • DSCIM
   Reveal Solution Discussion Select an answer first