Why access control protects sensitive data in Snowflake - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

How does access control prevent unauthorized data access?

In Snowflake, access control is used to protect sensitive data. Which of the following best explains how access control achieves this?

A By restricting who can see or modify data based on assigned roles and permissions.

B By encrypting data so only authorized users can decrypt it automatically.

C By backing up data regularly to prevent loss from unauthorized access.

D By monitoring network traffic to detect unauthorized data transfers.

💡 Hint

Think about how Snowflake controls who can do what with data.

Access control works by assigning roles and permissions that limit which users can view or change sensitive data, preventing unauthorized access.

❓ service_behavior

intermediate

What happens if a user lacks required permissions in Snowflake?

A user tries to query a table containing sensitive data but does not have the necessary permissions. What will Snowflake do?

A Return an error denying access to the data.

B Log the query but return empty results.

C Allow the query but mask sensitive columns automatically.

D Redirect the query to a public copy of the data.

💡 Hint

Consider how Snowflake enforces permissions strictly.

If a user lacks permissions, Snowflake denies access and returns an error to prevent unauthorized data exposure.

❓ Architecture

advanced

Designing access control for multi-tenant Snowflake environment

You manage a Snowflake environment serving multiple clients. How should you design access control to ensure each client only accesses their own data?

A Grant all clients access to the same tables but restrict columns with masking policies.

B Allow clients to share roles but separate data by schema names only.

C Use a single shared database and rely on client-side filtering in queries.

D Create separate roles and databases for each client, granting permissions only to their roles.

💡 Hint

Think about isolating data and permissions clearly per client.

Creating separate roles and databases per client ensures strict isolation and prevents accidental or malicious cross-client data access.

❓ security

advanced

Which Snowflake feature enhances access control for sensitive columns?

To protect sensitive columns in a table, which Snowflake feature allows you to control access at the column level?

A Resource Monitors

B Dynamic Data Masking policies

C Time Travel

D Virtual Warehouses

💡 Hint

Consider features that limit data visibility within a table.

Dynamic Data Masking policies let you mask sensitive column data based on user roles, enhancing access control at a fine-grained level.

✅ Best Practice

expert

Best practice for granting least privilege access in Snowflake

What is the best practice to follow when granting access permissions to users in Snowflake to protect sensitive data?

A Grant permissions based on user seniority rather than job function.

B Grant all users full access initially and reduce permissions later if needed.

C Grant users only the minimum permissions they need to perform their tasks.

D Grant permissions to everyone and rely on auditing to catch misuse.

💡 Hint

Think about minimizing risk by limiting access.

Granting the minimum necessary permissions (least privilege) reduces the risk of accidental or malicious data exposure.