Snowflake Architect Data Security and Governance Flashcards
5 cards from real Snowflake Architect Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 5 Snowflake Architect Data Security and Governance flashcards as text
Which feature in Snowflake allows you to control column-level access to sensitive data?
Answer: Dynamic Data Masking
Dynamic Data Masking in Snowflake allows you to control column-level access to sensitive data by applying a masking policy to a column. This policy dynamically transforms the data at query time based on the user's role or other conditions, without altering the underlying data. For example, a user might see only the last four digits of a credit card number, while an authorized user sees the full number, ensuring data privacy.
What is the primary purpose of Snowflake’s Zero Trust security model?
Answer: To enforce strict access control and authentication
Snowflake's Zero Trust security model is primarily designed to enforce strict access control and authentication for all users and resources, regardless of whether they are inside or outside the traditional network perimeter. This model operates on the principle of 'never trust, always verify,' meaning every access attempt is authenticated and authorized based on least privilege. This approach significantly enhances data protection by minimizing the attack surface and preventing unauthorized access.
Which of the following does Snowflake use to encrypt data at rest and in transit?
Answer: SSL/TLS for data in transit and AES-256 for data at rest
Snowflake employs industry-standard encryption protocols to secure data. For data in transit, it uses SSL/TLS (Secure Sockets Layer/Transport Layer Security) to establish secure communication channels, protecting data as it moves between clients and the service. For data at rest, Snowflake utilizes AES-256 (Advanced Encryption Standard with a 256-bit key), a robust symmetric encryption algorithm, to encrypt all data stored in its cloud storage layer, ensuring its confidentiality and integrity.
Which governance feature allows Snowflake to track and manage who accessed which data and when?
Answer: Access History
Access History is a powerful governance feature in Snowflake that provides detailed auditing capabilities. It records comprehensive information about who accessed specific data, which queries were run, and when these actions occurred. This granular tracking is crucial for security audits, compliance requirements, and understanding data usage patterns within an organization.
How can Snowflake ensure compliance with GDPR or HIPAA regulations?
Answer: By configuring role-based access control (RBAC) and auditing features
To comply with regulations like GDPR or HIPAA, Snowflake provides robust security and governance features. Configuring role-based access control (RBAC) allows organizations to define precise permissions, ensuring only authorized users can access sensitive data. Additionally, Snowflake's auditing features create a comprehensive log of data access and modifications, providing the necessary transparency and accountability required by these regulations.