Implement Masking Policies, Row Access Policies, and Tagging SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a 'customer' table with columns 'name', 'email', and 'country'. The security engineer must ensure that: (1) users from the 'analyst' role see masked email addresses, (2) users from the 'support' role see full email addresses, and (3) users from the 'analyst' role only see rows where country = 'US'. The 'support' role should see all rows. What is the most efficient way to implement this?

   • ACreate a row access policy on the email column that masks values for analysts and filters rows for analysts.
   • BCreate a secure view that masks email for analysts and filters rows for analysts, and grant access to the view for all users.
   • CCreate a masking policy on the email column that returns the full value for CURRENT_ROLE() = 'SUPPORT' and masked otherwise. Create a row access policy on the table that returns TRUE if CURRENT_ROLE() = 'SUPPORT' OR country = 'US'.
   • DCreate a single masking policy on the table that masks email and filters rows based on role.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following best describes a tag in Snowflake?

   • AA type of masking policy
   • BA database object that stores sensitive data
   • CA key-value pair that can be assigned to objects or columns
   • DA privilege that grants access to tables
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which SQL command is used to create a masking policy in Snowflake?

   • ACREATE SECURITY POLICY
   • BCREATE MASKING POLICY
   • CCREATE COLUMN POLICY
   • DCREATE DATA POLICY
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of a row access policy in Snowflake?

   • ATo mask column values at query time
   • BTo restrict which rows a user can see in a table or view
   • CTo control access to the table's metadata
   • DTo encrypt data in transit
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which SQL command is used to create a tag in Snowflake?

   • ACREATE CLASSIFICATION
   • BCREATE TAG
   • CCREATE LABEL
   • DCREATE METADATA
   Reveal Solution Discussion Select an answer first