Your security team needs to review all login attempts to Snowflake, including successful and failed ones, for the past 30 days. Where should they look?

The QUERY_HISTORY view in the ACCOUNT_USAGE schema.

The ACCESS_HISTORY view in the ACCOUNT_USAGE schema.

The LOGIN_HISTORY view in the ACCOUNT_USAGE schema.

The SESSIONS view in the INFORMATION_SCHEMA.

Your organization has a requirement that all Snowflake users must use MFA, but some users are using legacy clients that do not support MFA. You need to allow these users to continue using the legacy clients while still enforcing MFA for all other users. What should you do?

Create a separate role for legacy client users and grant it to those users, then configure MFA enforcement to skip that role.

Use a session policy to require MFA only for sessions that are not from the legacy client IP range.

Use an external OAuth token that includes MFA claims, and configure the legacy clients to use OAuth instead of basic authentication.

Create a network policy that allows only the legacy clients' IP range and disable MFA for those users.

What is the purpose of designing a role hierarchy in Snowflake?

To enable privilege inheritance and simplify access management

A data engineering team needs to load data into a staging schema and create new tables in that schema, but they should not be able to drop or truncate tables. You need to grant the team the minimum privileges required. What should you do?

Create a role with USAGE on the database and schema, and CREATE TABLE on the schema.

Grant the team the OWNERSHIP privilege on the staging schema.

Assign the team the ACCOUNTADMIN role and revoke DROP TABLE from it.

Grant the team the CREATE SCHEMA privilege on the database.

What is required to establish a federated authentication integration between Snowflake and an external identity provider?

A security integration object in Snowflake

A network policy allowing the IdP's IP addresses

A storage integration for the IdP

Snowflake SnowPro Advanced:Security Engineer

Domain 2Objective 1

Implement and Manage User Identity and Access Control Mechanisms SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Identity and Access Management domain, which makes up ~24% of our current practice bank.

30questions here

6free pages

10concepts

Questions 11–15

11application · medium
Your security team needs to review all login attempts to Snowflake, including successful and failed ones, for the past 30 days. Where should they look?
Select an answer first
12expert · hard
Your organization has a requirement that all Snowflake users must use MFA, but some users are using legacy clients that do not support MFA. You need to allow these users to continue using the legacy clients while still enforcing MFA for all other users. What should you do?
Select an answer first
13foundation · easy
What is the purpose of designing a role hierarchy in Snowflake?
Select an answer first
14application · medium
A data engineering team needs to load data into a staging schema and create new tables in that schema, but they should not be able to drop or truncate tables. You need to grant the team the minimum privileges required. What should you do?
Select an answer first
15foundation · easy
What is required to establish a federated authentication integration between Snowflake and an external identity provider?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.