Snowflake SnowPro Advanced Administrator - SnowPro Advanced Administrator ADA-C01 Exam
Page: 3 / 13
Total 65 questions
Question #11 (Topic: Topic 1, Snowflake Security, RBAC, and User Administration
)
A Snowflake Administrator configured access to table DB.S1.T1 to Role A leveraging the role inheritance with Role B. However, the users report that they cannot select from the table DB.S1.T1 when using Role A.
Review the following SHOW GRANTS output:
What could be the reason?
Review the following SHOW GRANTS output:
What could be the reason?
A. Role B is missing the USAGE privilege on schema DB.S1.
B. Role A inherits Role B.
C. Role A should also be granted Role C.
D. Role B inherits Role A.
Answer: A
Question #12 (Topic: Topic 1, Snowflake Security, RBAC, and User Administration
)
What SCIM integration types are supported in Snowflake? (Choose three.)
A. Amazon Web Services (AWS)
B. Google Cloud Platform (GCP)
C. Okta
D. Custom
E. Azure Active Directory (Azure AD)
F. Duo Security Provisioning Connector
Answer: CDE
Question #13 (Topic: Topic 1, Snowflake Security, RBAC, and User Administration
)
An Administrator has been asked to support the company's application team need to build a loyalty program for its customers. The customer table contains Personal Identifiable Information (PII), and the application team's role is DEVELOPER.
CREATE TABLE customer_data (
customer_first_name string,
customer_last_name string,
customer_address string,
customer_email string,
... some other columns,
) ;
The application team would like to access the customer data, but the email field must be obfuscated.
How can the Administrator protect the sensitive information, while maintaining the usability of the data?
CREATE TABLE customer_data (
customer_first_name string,
customer_last_name string,
customer_address string,
customer_email string,
... some other columns,
) ;
The application team would like to access the customer data, but the email field must be obfuscated.
How can the Administrator protect the sensitive information, while maintaining the usability of the data?
A. Create a view on the customer_data table to eliminate the email column by omitting it from the SELECT clause. Grant the role DEVELOPER access to the view.
B. Create a separate table for all the non-PII columns and grant the role DEVELOPER access to the new table.
C. Use the CURRENT_ROLE and CURRENT_USER context functions to integrate with a secure view and filter the sensitive data.
D. Use the CURRENT_ROLE context function to integrate with a masking policy on the fields that contain sensitive data.
Answer: D
Question #14 (Topic: Topic 1, Snowflake Security, RBAC, and User Administration
)
A user has built a view named DB.VWS.TEST_VIEW in Snowflake which only allows users having ROLE_XYZ to retrieve data from the view.
Roles Setup:
GRANT USAGE ON DATABASE DB TO ROLE ROLE_ALPHA;
GRANT USAGE ON SCHEMA DB.VWS TO ROLE ROLE_ALPHA;
GRANT SELECT ON VIEW TEST_VIEW IN SCHEMA DB.VWS TO ROLE ROLE_ALPHA;
GRANT ROLE ROLE_ALPHA TO ROLE ROLE_XYZ;
GRANT ROLE ROLE_XYZ TO ROLE ROLE_BETA;
GRANT ROLE ROLE_ALPHA TO USER USER1;
GRANT ROLE ROLE_BETA TO USER USER2;
GRANT ROLE ROLE_XYZ TO USER USER3;
View definition:
CREATE VIEW DB.VWS.TEST_VIEW AS
(
SELECT * FROM TEST TABLE
WHERE IS_ROLE_IN_SESSION('ROLE_XYZ')=TRUE
) ;
Which user and current role combination can retrieve data from the view? (Choose two.)
Roles Setup:
GRANT USAGE ON DATABASE DB TO ROLE ROLE_ALPHA;
GRANT USAGE ON SCHEMA DB.VWS TO ROLE ROLE_ALPHA;
GRANT SELECT ON VIEW TEST_VIEW IN SCHEMA DB.VWS TO ROLE ROLE_ALPHA;
GRANT ROLE ROLE_ALPHA TO ROLE ROLE_XYZ;
GRANT ROLE ROLE_XYZ TO ROLE ROLE_BETA;
GRANT ROLE ROLE_ALPHA TO USER USER1;
GRANT ROLE ROLE_BETA TO USER USER2;
GRANT ROLE ROLE_XYZ TO USER USER3;
View definition:
CREATE VIEW DB.VWS.TEST_VIEW AS
(
SELECT * FROM TEST TABLE
WHERE IS_ROLE_IN_SESSION('ROLE_XYZ')=TRUE
) ;
Which user and current role combination can retrieve data from the view? (Choose two.)
A. USER1 and ROLE_ALPHA
B. USER2 and ROLE_BETA
C. USER3 and ROLE_XYZ
D. USER1 and ROLE_XYZ
E. USER3 and ROLE_ALPHA
Answer: BC
Question #15 (Topic: Topic 1, Snowflake Security, RBAC, and User Administration
)
The following exhibit is the output of the FUTURE GRANTS set in the database named DB:
The output of the FUTURE GRANTS as configured in the schema, DB.S1 is shown below:
A Snowflake Administrator creates a table in the schema DB.S1:
USE ROLE SYSADMIN;
CREATE TABLE DB.S1.T1 (C1 INT);
The following command is run:
SHOW GRANTS ON TABLE DB.S1.T1;
What will be the outcome?
The output of the FUTURE GRANTS as configured in the schema, DB.S1 is shown below:
A Snowflake Administrator creates a table in the schema DB.S1:
USE ROLE SYSADMIN;
CREATE TABLE DB.S1.T1 (C1 INT);
The following command is run:
SHOW GRANTS ON TABLE DB.S1.T1;
What will be the outcome?
A. Privilege OWNERSHIP is granted to Role A
Privilege SELECT is granted to Role B B. Privilege OWNERSHIP is granted to role SYSADMIN
Privilege SELECT is granted to Role A C. Privilege OWNERSHIP is granted to Role A
Privilege SELECT is granted to Role A D. Privilege OWNERSHIP is granted to role SYSADMIN
Privilege SELECT is granted to Role B
Privilege SELECT is granted to Role B B. Privilege OWNERSHIP is granted to role SYSADMIN
Privilege SELECT is granted to Role A C. Privilege OWNERSHIP is granted to Role A
Privilege SELECT is granted to Role A D. Privilege OWNERSHIP is granted to role SYSADMIN
Privilege SELECT is granted to Role B
Answer: D
