Meet Regulatory Compliance Requirements SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   To meet PCI DSS requirements for restricting access to cardholder data, which Snowflake feature should a security engineer use to enforce that only specific users can query a column containing credit card numbers?

   • ADynamic Data Masking
   • BResource monitors
   • CNetwork policies
   • DColumn-level privileges (GRANT SELECT on column)
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   When preparing for a SOC 2 audit, which type of documentation is most important to demonstrate that security controls are properly configured in Snowflake?

   • AMarketing materials about Snowflake
   • BEmployee performance reviews
   • CSales forecasts
   • DConfiguration documentation and audit logs
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A healthcare organization stores patient health information in Snowflake. Which regulatory framework is most directly applicable to this scenario?

   • APCI DSS
   • BHIPAA
   • CSOC 2
   • DGDPR
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company must comply with GDPR and needs to implement a process to anonymize personal data in a Snowflake table. They want to replace all values in a column with a hash of the original value, so that the data can still be used for analytics but cannot be used to identify individuals. Which approach should they take?

   • ACreate a view that selects the hash of the column and drop the original column.
   • BUse a masking policy that returns the hash of the column value for all users.
   • CUse the HASH function in an UPDATE statement to replace the column values with a hash.
   • DUse the ENCRYPT function to encrypt the column values.
   Reveal Solution Discussion Select an answer first