- (Topic 6)
What does Snowflake recommend as a best practice for using secure views?
Correct Answer:D
Snowflake recommends not exposing sequence-generated columns in secure views. Secure views are used to protect sensitive data by ensuring that users can only access data for which they have permissions. Exposing sequence-generated columns can potentially reveal information about the underlying data structure or the number of rows, which might be sensitive.
✑ Create Secure Views:Define secure views using theSECUREkeyword to ensure
they comply with Snowflake's security policies.
✑ Exclude Sensitive Columns:When creating secure views, exclude columns that might expose sensitive information, such as sequence-generated columns.
CREATE SECURE VIEW secure_view AS SELECT col1, col2
FROM sensitive_table
WHERE sensitive_column IS NOT NULL;
References:
✑ Snowflake Documentation: Secure Views
✑ Snowflake Documentation: Creating Secure Views
These answers and explanations should provide comprehensive guidance on the specified Snowflake topics.
- (Topic 3)
How long can a data consumer who has a pre-signed URL access data files using Snowflake?
Correct Answer:D
A data consumer who has a pre-signed URL can access data files using Snowflake until the expiration time is exceeded. The expiration time is set when the pre- signed URL is generated and determines how long the URL remains valid3.
- (Topic 5)
What is it called when a customer managed key is combined with a Snowflake managed key to create a composite key for encryption?
Correct Answer:C
Tri-secret secure encryption is a security model employed by Snowflake that involves combining a customer-managed key with a Snowflake-managed key to create a composite key for encrypting data. This model enhances data security by requiring both the customer-managed key and the Snowflake-managed key to decrypt data, thus ensuring that neither party can access the data independently. It represents a balanced approach to key management, leveraging both customer control and Snowflake's managed services for robust data encryption.
References:
✑ Snowflake Documentation: Encryption and Key Management
- (Topic 4)
Which privilege must be granted by one role to another role, and cannot be revoked?
Correct Answer:C
The OWNERSHIP privilege is unique in that it must be granted by one role to another and cannot be revoked. This ensures that the transfer of ownership is deliberate and permanent, reflecting the importance of ownership in managing access and permissions.
- (Topic 6)
Which Snowflake feature can be used to find sensitive data in a table or column?
Correct Answer:B
Data classification in Snowflake is a feature that allows organizations to identify and categorize data stored in tables or columns based on its sensitivity level or content type. This feature can be used to find sensitive data within the database by classifying data as confidential, personal, public, etc., making it easier to apply appropriate security measures, such as masking policies or row-level security, to protect sensitive information. References:
✑ Snowflake Documentation: Data Classification