Implement Masking Policies, Row Access Policies, and Tagging SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which SQL command is used to create a row access policy in Snowflake?

   • ACREATE ROW ACCESS POLICY
   • BCREATE ACCESS POLICY
   • CCREATE SECURITY POLICY
   • DCREATE ROW POLICY
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary role of tags in Snowflake?

   • ATo assign metadata to objects for governance and policy association
   • BTo control user access to objects
   • CTo store data in a more efficient format
   • DTo encrypt data in tables
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How do you assign a tag to a column in a table?

   • ABy using ALTER TABLE ... MODIFY COLUMN ... SET TAG
   • BBy using GRANT TAG ON COLUMN
   • CBy using CREATE TABLE ... WITH TAG
   • DBy using UPDATE TABLE ... SET TAG
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A data governance team wants to track which columns contain sensitive data across the organization. They plan to use Snowflake tags to mark columns as 'PII' or 'PHI'. The security engineer needs to ensure that only the governance team can manage these tags, while other users can only view them. What should the security engineer do?

   • ACreate a masking policy that only allows the governance team to see tag metadata.
   • BGrant the governance team the APPLY TAG privilege on the tags and grant other users the TAG READ privilege.
   • CUse a row access policy on the tag objects to restrict who can see them.
   • DGrant all users the APPLY TAG privilege on the tags.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of a masking policy in Snowflake?

   • ATo transform sensitive column values at query time based on user context
   • BTo restrict which rows a user can see in a table
   • CTo encrypt data at rest in the storage layer
   • DTo permanently delete sensitive data from tables
   Reveal Solution Discussion Select an answer first