Share security and governance in Snowflake - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Snowflake Secure Data Sharing

What is the primary security feature of Snowflake's secure data sharing that ensures the data provider retains control over the shared data?

A The consumer can modify the shared data to suit their needs.

B The data is copied to the consumer's account for independent use.

C The data provider can revoke access at any time without copying data.

D The data provider loses control once the share is created.

💡 Hint

Think about how Snowflake avoids data duplication in sharing.

Snowflake's secure data sharing allows the provider to share live data without copying it. The provider keeps full control and can revoke access anytime.

❓ Architecture

intermediate

Snowflake Share Object Components

Which components can be included in a Snowflake share object to securely share data?

A Databases, schemas, tables, and secure views

B Only tables and external files

C User accounts and passwords

D Virtual warehouses and roles

💡 Hint

Consider what data objects are shareable in Snowflake.

Snowflake shares databases, schemas, tables, and secure views through share objects. User accounts and warehouses are not shared.

❓ security

advanced

Role-Based Access Control in Snowflake Shares

When sharing data in Snowflake, how does role-based access control (RBAC) affect the consumer's ability to access shared data?

A Consumers can access all shared data regardless of their roles.

B Consumers must have roles granted that match or exceed the privileges on shared objects.

C Roles are not used; access is open to any user in the consumer account.

D The provider's roles are automatically assigned to the consumer.

💡 Hint

Think about how Snowflake enforces permissions on shared data.

Consumers need appropriate roles with privileges to access shared data. Snowflake enforces RBAC strictly on shared objects.

✅ Best Practice

advanced

Governance Best Practices for Snowflake Data Sharing

Which practice best supports governance when sharing data securely in Snowflake?

A Disable auditing to improve performance.

B Share entire databases without restrictions for simplicity.

C Grant the consumer account full admin privileges.

D Use secure views to limit columns and rows exposed to consumers.

💡 Hint

Consider how to limit data exposure while sharing.

Using secure views allows providers to expose only necessary data, supporting governance and minimizing risk.

❓ service_behavior

expert

Effect of Revoking a Share in Snowflake

What happens immediately after a Snowflake data provider revokes a share from a consumer account?

A The consumer loses all access to the shared data instantly without data copies remaining.

B The consumer retains read access until their session ends.

C The shared data is deleted from the consumer's account automatically.

D The consumer can still query the data but cannot create new objects from it.

💡 Hint

Think about how Snowflake manages live data sharing and access control.

Revoking a share immediately cuts off consumer access since no data is copied; the consumer cannot access the data anymore.