A third-party application needs to access Snowflake data on behalf of users. The application is a web app that users log into with their corporate credentials. You need to implement OAuth for this scenario. Which OAuth flow should you use?

Resource owner password credentials flow.

Authorization code flow with PKCE.

Your organization uses Okta as its identity provider and has enabled SCIM provisioning for Snowflake. A contractor who was provisioned through Okta has left the company, and the IT admin deactivated the user in Okta. However, the user can still log in to Snowflake. What is the most likely reason for this?

Snowflake requires the user to be disabled in the IdP for at least 24 hours before deactivation.

The SCIM integration was configured with the wrong OAuth client secret.

The user was created manually in Snowflake and is not linked to the Okta SCIM integration.

The user's default role is set to a role with high privileges, preventing deactivation.

What is the primary use case for key-pair authentication in Snowflake?

Authenticating human users with MFA

Authenticating service accounts and automated processes

What is the purpose of OAuth in Snowflake?

To allow applications to access Snowflake on behalf of a user without sharing credentials

When a user is deactivated in an external identity provider that is integrated with Snowflake via SCIM, what happens to the corresponding Snowflake user?

The user remains active until manually disabled

The user is permanently deleted from Snowflake

The user is automatically deactivated in Snowflake

Snowflake SnowPro Advanced:Security Engineer

Domain 2Objective 1

Implement and Manage User Identity and Access Control Mechanisms SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 6)

Part of the Identity and Access Management domain, which makes up ~24% of our current practice bank.

30questions here

6free pages

10concepts

Questions 26–30

26expert · hard
A third-party application needs to access Snowflake data on behalf of users. The application is a web app that users log into with their corporate credentials. You need to implement OAuth for this scenario. Which OAuth flow should you use?
Select an answer first
27application · medium
Your organization uses Okta as its identity provider and has enabled SCIM provisioning for Snowflake. A contractor who was provisioned through Okta has left the company, and the IT admin deactivated the user in Okta. However, the user can still log in to Snowflake. What is the most likely reason for this?
Select an answer first
28foundation · easy
What is the primary use case for key-pair authentication in Snowflake?
Select an answer first
29foundation · easy
What is the purpose of OAuth in Snowflake?
Select an answer first
30foundation · easy
When a user is deactivated in an external identity provider that is integrated with Snowflake via SCIM, what happens to the corresponding Snowflake user?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.