Manage Role-Based Access Control SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has a team of data analysts who all need the same level of access to the ANALYTICS schema. The company also has a separate team of data scientists who need additional privileges to create models. What is the best role design?

   • AGrant all users the ACCOUNTADMIN role and let them manage their own privileges.
   • BCreate custom roles for each individual user based on their specific needs.
   • CCreate two functional roles: ANALYST_ROLE with read access and DATA_SCIENTIST_ROLE with read and create privileges, and assign users to the appropriate role.
   • DCreate a single role for all users with the combined privileges of both teams.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company has a team of data engineers who need to create and manage tables in the RAW schema. The team also has a data analyst who needs to query the tables but not modify them. What is the best role design?

   • AGrant all users the ACCOUNTADMIN role and let them manage their own privileges.
   • BCreate a single role for all users with both create and query privileges.
   • CCreate two roles: DATA_ENGINEER with create and manage privileges, and DATA_ANALYST with query privileges, and assign users to the appropriate role.
   • DCreate a custom role for each user based on their specific needs.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A role named SALES_REP has the USAGE privilege on the SALES database and the SELECT privilege on the CUSTOMERS table. The role is granted to a user. What can the user do?

   • AQuery the CUSTOMERS table.
   • BCreate a new table in the SALES database.
   • CQuery any table in the SALES database.
   • DModify the CUSTOMERS table.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security engineer is designing a role hierarchy for a financial services company. The company requires that no single role can both create and approve financial reports. The current design has a role REPORT_MANAGER that has both CREATE and APPROVE privileges. What should the engineer do to meet the requirement?

   • AKeep the REPORT_MANAGER role as is, but add a policy that prevents the same user from using both privileges.
   • BSplit the privileges into two roles: REPORT_CREATOR and REPORT_APPROVER, and ensure no user is granted both roles.
   • CCreate a parent role that has both privileges and grant it to all users.
   • DUse a custom role that combines the privileges but restrict it to a single user.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security engineer needs to transfer ownership of a stored procedure from a role that is being decommissioned to a new role. The stored procedure is used by several other roles. What is the most important step to ensure continued access?

   • AGrant the new owner role the EXECUTE privilege on the stored procedure before the transfer.
   • BAfter the transfer, have the new owner role re-grant EXECUTE to the roles that need it.
   • CKeep the old role active just for the stored procedure.
   • DUse the ACCOUNTADMIN role to transfer ownership and then grant EXECUTE to all roles.
   Reveal Solution Discussion Select an answer first