Implement Masking Policies, Row Access Policies, and Tagging SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A healthcare company stores patient data in a Snowflake table. The compliance team requires that all users see masked values for the 'email' column, but the data engineering team needs to see the full email for ETL jobs. The security team wants to minimize ongoing maintenance. Which approach should the security engineer take?

   • ACreate a masking policy on the email column that returns the full value when CURRENT_ROLE() = 'DATA_ENGINEER' and masks otherwise.
   • BCreate a view that masks the email column and grant access to the view instead of the table.
   • CCreate a tag on the email column and assign a masking policy to the tag.
   • DCreate a secure view that excludes the email column and grant access to that view.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the benefit of using tags to apply row access policies?

   • AIt eliminates the need for context functions in the policy
   • BIt allows the same policy to be applied to multiple tables or views without editing each one
   • CIt improves query performance
   • DIt allows the policy to be applied without any SQL
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How can tags be used to apply masking policies automatically?

   • ABy granting the masking policy to the tag
   • BBy using CREATE MASKING POLICY ... FOR TAG
   • CBy creating a masking policy that references a tag and then assigning that tag to columns
   • DBy using ALTER TAG ... SET MASKING POLICY
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which user context is commonly used in a row access policy to determine row visibility?

   • ACURRENT_REGION
   • BCURRENT_TIMESTAMP
   • CCURRENT_ROLE
   • DCURRENT_WAREHOUSE
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a masking policy body, what does the CASE expression typically evaluate?

   • AThe column's data type
   • BThe table's row count
   • CThe current date and time
   • DThe user context, such as CURRENT_ROLE or CURRENT_USER
   Reveal Solution Discussion Select an answer first