SnowPro Advanced Administrator Practice Test

SnowPro Advanced Administrator Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

A Snowflake Administrator configured access to table DB.S1.T1 to Role A leveraging the role inheritance with Role B. However, the users report that they cannot select from the table DB.S1.T1 when using Role A. Review the following SHOW GRANTS output: What could be the reason?

  1. Role B is missing the USAGE privilege on schema DB.S1.
  2. Role A inherits Role B.
  3. Role A should also be granted Role C.
  4. Role B inherits Role A.

Question 12

What SCIM integration types are supported in Snowflake? (Choose three.)

  1. Amazon Web Services (AWS)
  2. Google Cloud Platform (GCP)
  3. Okta
  4. Custom
  5. Azure Active Directory (Azure AD)
  6. Duo Security Provisioning Connector

Question 13

An Administrator has been asked to support the company's application team need to build a loyalty program for its customers. The customer table contains Personal Identifiable Information (PII), and the application team's role is DEVELOPER. CREATE TABLE customer_data ( customer_first_name string, customer_last_name string, customer_address string, customer_email string, ... some other columns, ) ; The application team would like to access the customer data, but the email field must be obfuscated. How can the Administrator protect the sensitive information, while maintaining the usability of the data?

  1. Create a view on the customer_data table to eliminate the email column by omitting it from the SELECT clause. Grant the role DEVELOPER access to the view.
  2. Create a separate table for all the non-PII columns and grant the role DEVELOPER access to the new table.
  3. Use the CURRENT_ROLE and CURRENT_USER context functions to integrate with a secure view and filter the sensitive data.
  4. Use the CURRENT_ROLE context function to integrate with a masking policy on the fields that contain sensitive data.