Manage Role-Based Access Control SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   What is the effect of revoking a role from a user in Snowflake?

   • AThe user can no longer use the role, but may still have access through other roles.
   • BThe user is disabled and must be re-enabled by an administrator.
   • CThe role is deleted from the system.
   • DThe user loses all privileges immediately, including those from other roles.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has a small team of data engineers who all need the same privileges to manage pipelines. The company also has a single data scientist who needs read-only access to the same data. What is the best role design?

   • AGrant all users the same role with combined privileges.
   • BCreate a single role and grant it to all users, then revoke privileges from the data scientist as needed.
   • CCreate a custom role for each data engineer and for the data scientist.
   • DCreate one role for the data engineers and a separate role for the data scientist.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which practice is an example of separation of duties in role-based access control?

   • AGranting a single role the ability to both create and approve access requests.
   • BGranting all users the ACCOUNTADMIN role for convenience.
   • CUsing the same role for all administrative tasks to reduce complexity.
   • DAssigning different roles to users who request access and users who approve access.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which Snowflake command is used to grant the SELECT privilege on a table to a role?

   • AGRANT TABLE my_table TO ROLE analyst WITH SELECT;
   • BGRANT SELECT ON TABLE my_table TO ROLE analyst;
   • CALLOW SELECT ON my_table TO ROLE analyst;
   • DPERMIT SELECT ON TABLE my_table TO ROLE analyst;
   Reveal Solution Discussion Select an answer first