Meet Regulatory Compliance Requirements SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A financial services company must comply with PCI DSS. They store credit card numbers in a Snowflake table. They need to ensure that only authorized applications can see the full card number, while support staff see only the last four digits. Which Snowflake feature should they implement?

   • AEncrypt the column using a customer-managed key and grant decryption rights only to authorized roles.
   • BCreate a masking policy on the card number column that returns the full value only when the querying role is in a specific list of roles.
   • CCreate a view that selects only the last four digits and grant access to the view instead of the table.
   • DCreate a row access policy on the table that filters rows based on the querying role.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which regulatory framework specifically addresses the protection of cardholder data for organizations that process credit card transactions?

   • AHIPAA
   • BPCI DSS
   • CSOC 2
   • DGDPR
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Snowflake account-level feature provides a record of login attempts, including successful and failed logins, which is useful for compliance evidence?

   • AAccount Usage views
   • BInformation Schema
   • CWarehouse Events
   • DQuery History
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A company must demonstrate that they can provide a copy of all personal data they hold about an EU citizen upon request, as required by GDPR. Which Snowflake feature is most directly used to fulfill this requirement?

   • ASearch Optimization Service
   • BData Sharing
   • CQuerying tables with filters on the individual's identifier
   • DTime Travel
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security engineer is designing a compliance solution for a company that must meet both HIPAA and PCI DSS. They need to protect PHI and cardholder data in the same Snowflake account. They want to minimize the risk of unauthorized access while ensuring that access is logged. Which approach should they take?

   • AEnable network policies to restrict access to the account and use QUERY_HISTORY to log queries.
   • BCreate separate schemas for PHI and cardholder data, apply masking policies to sensitive columns in each schema, and enable ACCESS_HISTORY.
   • CEnable encryption with customer-managed keys and create views that expose only non-sensitive columns.
   • DApply masking policies to all sensitive columns, create row access policies to restrict access based on role, and enable ACCESS_HISTORY.
   Reveal Solution Discussion Select an answer first