Manage Role-Based Access Control SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a key implication of owning a role in Snowflake?

   • AThe owner can grant or revoke the role to other roles and users.
   • BThe owner automatically inherits all privileges of the role.
   • CThe owner must be a user, not a role.
   • DThe owner cannot transfer ownership to another role.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which design principle is most important when building a role hierarchy in Snowflake to support least privilege?

   • AAssign all object privileges directly to users to avoid role complexity.
   • BCreate a deep hierarchy with many levels to maximize flexibility.
   • CGrant roles only the privileges necessary for their function, and use role hierarchy to inherit only what is needed.
   • DGrant the highest-level role to all users to simplify management.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security engineer is reviewing the privileges of a role that has been granted the MANAGE GRANTS privilege on an account. What is the most important security implication?

   • AThe role can only grant privileges on objects it owns.
   • BThe role can only grant the privileges it has been granted.
   • CThe role can only revoke privileges, not grant them.
   • DThe role can grant any privilege on any object in the account to any role.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security engineer is transferring ownership of a critical table from a departing employee's role to a new team role. The departing employee's role currently owns the table and has granted SELECT to other roles. What is the most important consideration during the transfer?

   • ARevoke all privileges from the old owner role before transferring ownership.
   • BVerify that all dependent objects and grants are transferred or recreated after the ownership change.
   • CTransfer ownership using the ACCOUNTADMIN role to avoid any permission issues.
   • DEnsure the new owner role has the necessary privileges on the table before the transfer.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What happens to a user's access when a privilege is revoked from a role that the user has been granted?

   • AThe user immediately loses the ability to perform actions that depend on that privilege.
   • BThe user is automatically assigned a different role to compensate.
   • CThe user loses all privileges on all objects.
   • DThe user retains access until they log out and log back in.
   Reveal Solution Discussion Select an answer first