A security auditor is investigating a potential data breach. They need to determine whether any user accessed a sensitive table and then exported the data via a SELECT statement. They want to correlate access events with query execution details. Which approach best combines ACCESS_HISTORY and QUERY_HISTORY to achieve this?

Query ACCESS_HISTORY for the table and QUERY_HISTORY for SELECT statements separately, then manually compare timestamps.

Use LOGIN_HISTORY to identify users who logged in around the time of the access and then query ACCESS_HISTORY for those users.

Join ACCESS_HISTORY and QUERY_HISTORY on QUERY_ID to correlate access events with query details like execution status and error messages.

Use QUERY_HISTORY alone to find SELECT statements on the table, as it includes object access details.

A security analyst is examining ACCESS_HISTORY to understand which columns of a sensitive table were accessed by a specific query. They need to extract the column names from the OBJECTS_ACCESSED column. What is the correct way to access this information?

Use a LATERAL FLATTEN on OBJECTS_ACCESSED to access the 'columnsAccessed' field.

Cast OBJECTS_ACCESSED to a string and parse it manually.

Query QUERY_HISTORY for the column details.

Use OBJECTS_ACCESSED:"columns" directly.

Why would a security auditor combine data from ACCESS_HISTORY with LOGIN_HISTORY?

To determine which warehouse was used for each query

To correlate login events with subsequent data access events to identify potential unauthorized access

To calculate the total storage used by each user

To identify which queries were slowest

Snowflake SnowPro Advanced:Security Engineer

Domain 3Objective 3

Use ACCESS_HISTORY and Account Usage Views SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Part of the Security Auditing and Compliance domain, which makes up ~22% of our current practice bank.

21questions here

5free pages

7concepts

Questions 11–15

11foundation · easy
To monitor the total amount of storage used by the account over time, which account usage view should you query?
Select an answer first
12application · easy
A compliance officer needs to generate a report showing all successful and failed login attempts for the past month, including the user, timestamp, and authentication method. Which account usage view should they query?
Select an answer first
13expert · hard
A security auditor is investigating a potential data breach. They need to determine whether any user accessed a sensitive table and then exported the data via a SELECT statement. They want to correlate access events with query execution details. Which approach best combines ACCESS_HISTORY and QUERY_HISTORY to achieve this?
Select an answer first
14application · medium
A security analyst is examining ACCESS_HISTORY to understand which columns of a sensitive table were accessed by a specific query. They need to extract the column names from the OBJECTS_ACCESSED column. What is the correct way to access this information?
Select an answer first
15foundation · easy
Why would a security auditor combine data from ACCESS_HISTORY with LOGIN_HISTORY?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.

Use ACCESS_HISTORY and Account Usage Views SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

To monitor the total amount of storage used by the account over time, which account usage view should you query?

A compliance officer needs to generate a report showing all successful and failed login attempts for the past month, including the user, timestamp, and authentication method. Which account usage view should they query?

A security analyst is examining ACCESS_HISTORY to understand which columns of a sensitive table were accessed by a specific query. They need to extract the column names from the OBJECTS_ACCESSED column. What is the correct way to access this information?

Why would a security auditor combine data from ACCESS_HISTORY with LOGIN_HISTORY?

Keep studying — Security Auditing and Compliance