Meet Regulatory Compliance Requirements SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security engineer is preparing documentation for a compliance audit. They need to show that the Snowflake account has appropriate encryption settings and that access to sensitive data is logged. Which Snowflake views or schemas should they reference in their documentation?

   • AReference the SNOWFLAKE database for encryption settings and the QUERY_HISTORY view for access logs.
   • BReference the INFORMATION_SCHEMA for encryption settings and the QUERY_HISTORY view for access logs.
   • CReference the ACCOUNT_USAGE schema for encryption settings and the ACCESS_HISTORY view for access logs.
   • DReference the ORGANIZATION_USAGE schema for encryption settings and the EVENT_TABLE for access logs.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which Snowflake feature provides a centralized view of account activity, such as login history and query history, that can be used to generate compliance reports for auditors?

   • AAccount Usage views
   • BData sharing
   • CWarehouse events
   • DResource monitors
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A compliance mandate requires that only users in the 'FINANCE' role can view rows for their own department, while other users cannot see those rows at all. Which Snowflake feature is designed to enforce this type of restriction?

   • ADynamic Data Masking
   • BColumn-level privileges
   • CRow-level security
   • DNetwork policies
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security engineer is documenting compliance for a SOC 2 audit. They need to provide evidence that their Snowflake account has appropriate access controls and that changes to those controls are logged. Which Snowflake features should they enable and reference in their documentation?

   • AEnable EVENT_TABLE and use the ORGANIZATION_USAGE schema to document account activity.
   • BEnable ACCOUNT_USAGE and use the QUERY_HISTORY view to document all DDL statements.
   • CEnable ACCESS_HISTORY and use the ACCOUNT_USAGE schema to document user and role assignments.
   • DEnable QUERY_HISTORY and use the INFORMATION_SCHEMA to document table definitions.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company subject to GDPR must implement a data retention policy that automatically deletes personal data after 30 days. They also need to ensure that the deletion is logged for audit purposes. Which approach should they take?

   • ASet the table's data retention time to 30 days and enable QUERY_HISTORY.
   • BCreate a task that runs daily and deletes rows older than 30 days, and enable ACCESS_HISTORY to log the deletions.
   • CUse a stored procedure to delete rows older than 30 days and enable ACCOUNT_USAGE.
   • DCreate a masking policy that hides data older than 30 days and enable EVENT_TABLE.
   Reveal Solution Discussion Select an answer first