Secure data sharing basics in Snowflake - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Snowflake Secure Data Sharing

Which statement best describes how Snowflake secure data sharing works?

A Data is copied and moved to the consumer's account for access.

B Data is encrypted and stored in a shared external cloud bucket accessible by both parties.

C Data remains in the provider's account and is accessed directly by the consumer.

D Data is exported as files and sent to the consumer via email.

💡 Hint

Think about whether data physically moves or stays put during sharing.

Snowflake secure data sharing allows consumers to query data directly in the provider's account without copying or moving it.

❓ Architecture

intermediate

Components Required for Snowflake Data Sharing

Which combination of Snowflake objects must a provider create to share data securely with a consumer?

A A share and a database containing the objects to share.

B A share, a database, and a secure view.

C A database, a share, and a virtual warehouse.

D A secure view and a virtual warehouse.

💡 Hint

Consider what objects define the shared data and the sharing mechanism.

The provider creates a share and adds database objects to it. The consumer accesses the shared data via the share.

❓ security

advanced

Access Control in Snowflake Secure Data Sharing

What is the effect of granting SELECT privileges on a table to a share in Snowflake?

A Consumers can only read the table data but cannot modify it.

B Consumers can modify the table data in the provider's account.

C Consumers can create new tables in the provider's database.

D Consumers can delete the table from the provider's database.

💡 Hint

Think about what SELECT privilege allows.

Granting SELECT on a table to a share allows consumers to read data but not modify or delete it.

❓ service_behavior

advanced

Behavior of Consumer Access to Shared Data

When a consumer queries data shared via Snowflake secure sharing, where is the query executed?

A In the provider's virtual warehouse accessing the original data.

B In the consumer's virtual warehouse accessing the provider's data remotely.

C In the consumer's virtual warehouse accessing a local copy of the data.

D In a shared virtual warehouse managed by Snowflake.

💡 Hint

Consider where compute resources run and where data physically resides.

The consumer's virtual warehouse runs the query, accessing the provider's data remotely without copying it.

✅ Best Practice

expert

Best Practice for Managing Sensitive Data in Snowflake Sharing

Which approach best protects sensitive columns when sharing data securely in Snowflake?

A Share the entire table and rely on consumers to ignore sensitive columns.

B Grant full access to the table and audit consumer queries regularly.

C Export the table to CSV, remove sensitive columns, then share the file externally.

D Create a secure view that excludes or masks sensitive columns and share the view instead.

💡 Hint

Think about controlling data visibility at the object level within Snowflake.

Using secure views to exclude or mask sensitive columns ensures only allowed data is shared securely.