Implement and Manage User Identity and Access Control Mechanisms SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the purpose of a network policy in Snowflake?

   • ATo control data sharing
   • BTo restrict user access based on IP addresses
   • CTo enforce password complexity
   • DTo manage session idle timeouts
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In Snowflake's access control model, what is the primary mechanism for granting privileges to users?

   • AAssigning roles to users
   • BGranting privileges directly to users
   • CAssigning users to groups
   • DUsing access control lists (ACLs)
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   Your security team wants to restrict Snowflake access to only the corporate VPN IP range and also enforce a session timeout of 30 minutes. You have created a network policy and a session policy. What is the correct way to apply these policies to all users?

   • AApply both policies at the account level so they apply to all users.
   • BApply the session policy to the account and the network policy to each user individually.
   • CCreate a role that has both policies and grant it to all users.
   • DApply the network policy to the account and the session policy to each user individually.
   Reveal Solution Discussion Select an answer first
5. 24expert · medium

   Your security team suspects that a user's credentials were compromised. They need to determine if the user logged in from an unusual IP address. Which Snowflake view should they query to get this information?

   • ASESSIONS
   • BACCESS_HISTORY
   • CLOGIN_HISTORY
   • DQUERY_HISTORY
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of Snowflake's audit logs?

   • ATo enforce password policies
   • BTo track user access and authentication events for security and compliance
   • CTo optimize query performance
   • DTo manage data storage
   Reveal Solution Discussion Select an answer first