A company must comply with GDPR and needs to ensure that personal data is protected from unauthorized access and that any access is logged. They also need to ensure that data is not retained longer than necessary. Which combination of Snowflake features should they implement?

Implement masking policies on personal data columns, enable ACCESS_HISTORY, and set up a data retention policy to delete data after a specified period.

Implement network policies, enable ACCOUNT_USAGE, and set up a clone of the table for backup.

Implement encryption with customer-managed keys, enable EVENT_TABLE, and set up a resource monitor to limit query concurrency.

Implement row access policies, enable QUERY_HISTORY, and set up a task to archive data after a specified period.

A company processes credit card transactions and must comply with PCI DSS. They store cardholder data in Snowflake. Which Snowflake features are most directly aligned with PCI DSS requirements for protecting cardholder data?

Enable encryption at rest, implement masking policies on cardholder data columns, and enable ACCESS_HISTORY.

Enable customer-managed keys for encryption and use row access policies to restrict access to cardholder data.

Enable Time Travel to retain data for 30 days and enable EVENT_TABLE.

Enable network policies to restrict access to the account and enable QUERY_HISTORY.

A security team needs to provide evidence to an auditor that no user has accessed a specific sensitive table in the last 90 days. Which Snowflake feature should they use to retrieve this information?

Query the INFORMATION_SCHEMA.TABLES view to see the last accessed timestamp.

Query the EVENT_TABLE to see if any events reference the table.

Query the QUERY_HISTORY view in the ACCOUNT_USAGE schema.

Query the ACCESS_HISTORY view in the ACCOUNT_USAGE schema.

A company must comply with GDPR and needs to implement data protection controls to ensure that personal data is only accessible to authorized personnel and that access is logged. Which combination of Snowflake features should they implement?

Implement encryption with customer-managed keys and enable EVENT_TABLE.

Implement network policies and enable QUERY_HISTORY.

Implement row access policies and masking policies on tables containing personal data, and enable ACCESS_HISTORY.

Implement data retention policies and enable ACCOUNT_USAGE.

A company must comply with GDPR and needs to implement a data protection strategy that allows them to delete a user's data upon request, but also allows them to retain anonymized data for analytics. They have a table with personal data. Which approach should they take?

Anonymize the user's data by updating the personal columns with hashed values, then delete the original data from Time Travel and Fail-safe.

Delete the rows containing the user's data and then purge the table from Time Travel and Fail-safe.

Copy the table to a separate schema, delete the original table, and then purge the original table.

Create a view that masks the user's data and drop the original table.

Snowflake SnowPro Advanced:Security Engineer

Domain 3Objective 2

Meet Regulatory Compliance Requirements SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Security Auditing and Compliance domain, which makes up ~22% of our current practice bank.

24questions here

5free pages

6concepts

Questions 11–15

11application · medium
A company must comply with GDPR and needs to ensure that personal data is protected from unauthorized access and that any access is logged. They also need to ensure that data is not retained longer than necessary. Which combination of Snowflake features should they implement?
Select an answer first
12application · medium
A company processes credit card transactions and must comply with PCI DSS. They store cardholder data in Snowflake. Which Snowflake features are most directly aligned with PCI DSS requirements for protecting cardholder data?
Select an answer first
13application · medium
A security team needs to provide evidence to an auditor that no user has accessed a specific sensitive table in the last 90 days. Which Snowflake feature should they use to retrieve this information?
Select an answer first
14application · medium
A company must comply with GDPR and needs to implement data protection controls to ensure that personal data is only accessible to authorized personnel and that access is logged. Which combination of Snowflake features should they implement?
Select an answer first
15expert · hard
A company must comply with GDPR and needs to implement a data protection strategy that allows them to delete a user's data upon request, but also allows them to retain anonymized data for analytics. They have a table with personal data. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.