A company has separate teams for data engineering and data science. The data engineering team owns the raw data tables, and the data science team needs to read them for analysis. The security team wants to minimize privilege escalation. Which role design should you recommend?

Grant the data science role the USAGE privilege on the raw data tables directly.

Create a parent role that has the read privilege and grant it to both the data engineering and data science roles.

Create a read-only role, grant it the read privilege on the raw tables, and grant that role to the data science role.

Grant the data science role the OWNERSHIP of the raw data tables.

Which command is used to transfer ownership of a role to another role in Snowflake?

ALTER ROLE my_role SET OWNER = new_owner;

CHANGE ROLE OWNER my_role TO new_owner;

TRANSFER ROLE my_role TO new_owner;

GRANT OWNERSHIP ON ROLE my_role TO ROLE new_owner;

A security engineer is designing a role hierarchy for a company with a strict policy that the HR role should have access to employee data, but the PAYROLL role should not have access to HR data. The PAYROLL role needs access to some HR data for payroll processing. What is the best approach?

Grant the PAYROLL role the HR role, so PAYROLL inherits HR privileges.

Create a separate role PAYROLL_HR_READ with only the specific HR data needed by PAYROLL, and grant that role to PAYROLL.

Create a parent role that has access to both HR and PAYROLL data, and grant it to both roles.

Grant the HR role the PAYROLL role, so HR inherits PAYROLL privileges.

Which statement correctly describes how to assign a role to a user in Snowflake?

Use the GRANT ROLE command to assign the role to the user.

Use the ASSIGN ROLE command to link the role to the user.

Use the ALTER USER command with the SET ROLE parameter.

Use the CREATE ROLE command with the FOR USER clause.

How does a custom role differ from a functional role in Snowflake?

Custom roles are created for specific, often temporary, needs and may not align with a standard job function.

Custom roles are automatically created by Snowflake.

Custom roles cannot be granted to users.

Custom roles have fewer privileges than functional roles.

Snowflake SnowPro Advanced:Security Engineer

Domain 2Objective 3

Manage Role-Based Access Control SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Identity and Access Management domain, which makes up ~24% of our current practice bank.

24questions here

5free pages

6concepts

Questions 11–15

11application · medium
A company has separate teams for data engineering and data science. The data engineering team owns the raw data tables, and the data science team needs to read them for analysis. The security team wants to minimize privilege escalation. Which role design should you recommend?
Select an answer first
12foundation · easy
Which command is used to transfer ownership of a role to another role in Snowflake?
Select an answer first
13expert · hard
A security engineer is designing a role hierarchy for a company with a strict policy that the HR role should have access to employee data, but the PAYROLL role should not have access to HR data. The PAYROLL role needs access to some HR data for payroll processing. What is the best approach?
Select an answer first
14foundation · easy
Which statement correctly describes how to assign a role to a user in Snowflake?
Select an answer first
15foundation · easy
How does a custom role differ from a functional role in Snowflake?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.