Snowflake ADA-C01 Actual Tests : SnowPro Advanced Administrator

What access control policy will be put into place when future grants are assigned to both database and schema objects?

• A. Schema privileges will take precedence over database privileges.
• B. An access policy combining both the database object and the schema object will be used, with the most restrictive policy taking precedence.
• C. Database privileges will take precedence over schema privileges.
• D. An access policy combining both the database object and the schema object will be used, with the most permissive policy taking precedence.

DatabaseA has a single schema called Schema1. This schema contains many tables and views. The ANALYST role has privileges to select from all objects in DatabaseA. Schema1. The SYSADMIN role clones DatabaseA to DatabaseA_clone.
What privileges does the ANALYST role have on tables and views in DatabaseA_clone? (Select TWO).

• A. SELECT on all tables, and only non-secure views in DatabaseA_clone. Schemal
• B. USAGE on the schema DatabaseA clone
• C. SELECT on all tables and views in DatabaseA_clone. Schema1
• D. SELECT on all tables, and only secure views in DatabaseA_clone. Schemal
• E. USAGE on the database DatabaseA_clone. Schemal

An Administrator needs to implement an access control mechanism across an organization. The organization users access sensitive customer data that comes from different regions and needs to be accessible for Analysts who work in these regions. Some Analysts need very specific access control depending on their functional roles in the organization. Following Snowflake recommended practice, how should these requirements be met? (Select TWO).

• A. Implement row access policies and Dynamic Data Masking policies.
• B. Implement views on top of base tables that exclude or mask sensitive data.
• C. Use a third-party tool to share the data.
• D. Use zero-copy cloning to replicate the database schema and provide access as needed.
• E. Include masking rules as part of data ingestion and transformation pipelines.

If the query matches the definition, will Snowflake always dynamically rewrite the query to use a materialized view?

• A. No, because the optimizer might decide against it.
• B. No, because joins are not supported by materialized views.
• C. No, because the materialized view may not be up-to-date.
• D. Yes, because materialized views are always faster.

A Snowflake Administrator created a role ROLE_MANAGED_ACCESS and a schema SCHEMA_MANAGED_ACCESS as follows:
USE ROLE SECURITYADMIN;
CREATE ROLE ROLE_MANAGED_ACCESS;
GRANT ROLE ROLE_MANAGED_ACCESS TO ROLE SYSADMIN;
GRANT USAGE ON WAREHOUSE COMPUTE_WH TO ROLE ROLE_MANAGED_ACCESS;
GRANT ALL privileges ON DATABASE WORK TO ROLE ROLE_MANAGED_ACCESS;
USE ROLE ROLE_MANAGED_ACCESS;
CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITH MANAGED ACCESS;
USE ROLE SECURITYADMIN;
GRANT SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA MANAGED ACCESS to ROLE_MANAGED_ACCESS; The Administrator now wants to disable the managed access on the schema.
How can this be accomplished?

• A. REVOKE SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA_MANAGED_ACCESS FROM ROLE_MANAGED_ACCESS; ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;
• B. USE ROLE ROLE_MANAGED_ACCESS;
  DROP SCHEMA WORK. SCHEMA MANAGED_ACCESS;
  CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITHOUT MANAGED ACCESS;
  Then recreate all needed objects.
• C. USE ROLE ROLE MANAGED_ACCESS;
  DROP SCHEMA WORK. SCHEMA_MANAGED_ACCESS;
  CREATE SCHEMA SCHEMA_MANAGED_ACCESS;
  Then recreate all needed objects.
• D. ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;