SnowPro Advanced Security and Governance Quiz

1. What is the primary purpose of Dynamic Data Masking (DDM) in Snowflake?

Encrypt data at rest

Hide sensitive data from unauthorized users in real-time

Compress large datasets

Archive historical data

2. What is the primary purpose of implementing Network Policies in Snowflake?

Improve query performance

Control which IP addresses can connect to Snowflake

Reduce data storage costs

Optimize warehouse compute allocation

3. Which Snowflake feature logs all administrative actions performed on account objects?

Query Result Cache

Login History

Object Change Tracking

Account Activity Logs

4. In Snowflake, what is the primary benefit of using Snowflake-managed encryption keys (SMEK)?

Users retain full control of encryption keys

Snowflake automatically manages key rotation and security

Keys are stored locally for faster access

Encryption is optional for cost savings

5. Which Snowflake feature allows row-level access control based on user identity or attributes?

Column Masking

Row Access Policies

Schema-Level Security

Database Encryption

6. What is the purpose of Multi-Factor Authentication (MFA) in Snowflake?

Encrypt stored data

Add an extra layer of login security

Compress data transmission

Distribute queries across warehouses

7. In Snowflake, what does the SECURITYADMIN role primarily manage?

User creation and authentication

Network policies and encryption keys

Database and schema creation

Warehouse resource allocation

8. Which Snowflake compliance framework certification focuses on data protection and privacy in the EU?

HIPAA

SOC 2

GDPR

PCI-DSS

9. What is the primary advantage of using Federated Authentication in Snowflake?

Reduces query latency

Centralizes user identity management with external providers

Increases storage capacity

Improves data compression

10. Which Snowflake feature allows you to define masking policies that automatically hide sensitive data?

Column-level security

Row Access Policies

Masking Policies

Data Classification Rules

11. In role-based access control (RBAC), what is the primary benefit of using custom roles?

Faster query execution

Granular permission management aligned with organizational structure

Reduced storage costs

Simplified data replication

12. What does Snowflake's Query Result Cache (QRC) help protect against?

SQL injection attacks

Unauthorized query result access through cache reuse

Data loss during transmission

Brute force login attempts

13. Which Snowflake encryption method protects data while it is being transmitted over the network?

At-rest encryption

In-transit encryption

End-to-end encryption

Application-level encryption

14. In Snowflake, which role has the highest level of privileges by default?

SYSADMIN

USERADMIN

ACCOUNTADMIN

SECURITYADMIN

15. Which Snowflake feature allows you to restrict network access to specific IP addresses or CIDR blocks?

Network Policies

Firewall Rules

Security Groups

Access Control Lists

16. Which Snowflake feature prevents unauthorized users from viewing query results cached from previous executions?

Query Encryption

Result Set Isolation

Cache Policies

Access Control Lists

17. Which Snowflake feature provides a complete audit trail of all account activities?

Query History

Login History

Account Usage Views

Activity Logging

18. In Snowflake, which view provides detailed information about query execution and resource usage for compliance auditing?

INFORMATION_SCHEMA

ACCOUNT_USAGE

QUERY_HISTORY

SECURITY_LOGS

19. What does Snowflake's Zero-Knowledge Architecture ensure?

No user data is accessible to Snowflake employees

All queries run with zero latency

No backup copies of data are maintained

No third-party integrations are allowed

20. In Snowflake, which compliance standard requires organizations to maintain detailed audit logs of all data access?

PCI-DSS only

HIPAA only

Multiple standards including HIPAA, GDPR, and SOC 2

No compliance standards require audit logging