Snowflake ARA-C01 Exam - Topic 3 Question 21 Discussion

Actual exam question for Snowflake's ARA-C01 exam

Question #: 21
Topic #: 3

Consider the following scenario where a masking policy is applied on the CREDICARDND column of the CREDITCARDINFO table. The masking policy definition Is as follows:

Sample data for the CREDITCARDINFO table is as follows:

NAME EXPIRYDATE CREDITCARDNO

JOHN DOE 2022-07-23 4321 5678 9012 1234

if the Snowflake system rotes have not been granted any additional roles, what will be the result?

AThe sysadmin can see the CREDICARDND column data in clear text.

BThe owner of the table will see the CREDICARDND column data in clear text.

CAnyone with the Pl_ANALYTICS role will see the last 4 characters of the CREDICARDND column data in dear text.

DAnyone with the Pl_ANALYTICS role will see the CREDICARDND column as*** 'MASKED* **'.

Show Suggested Answer

Suggested Answer: D

The masking policy defined in the image indicates that if a user has the PI_ANALYTICS role, they will be able to see the last 4 characters of the CREDITCARDNO column data in clear text. Otherwise, they will see 'MASKED'. Since Snowflake system roles have not been granted any additional roles, they won't have the PI_ANALYTICS role and therefore cannot view the last 4 characters of credit card numbers.

To apply a masking policy on a column in Snowflake, you need to use the ALTER TABLE ... ALTER COLUMN command or the ALTER VIEW command and specify the policy name. For example, to apply the creditcardno_mask policy on the CREDITCARDNO column of the CREDITCARDINFO table, you can use the following command:

ALTER TABLE CREDITCARDINFO ALTER COLUMN CREDITCARDNO SET MASKING POLICY creditcardno_mask;

For more information on how to create and use masking policies in Snowflake, you can refer to the following resources:

CREATE MASKING POLICY: This document explains the syntax and usage of the CREATE MASKING POLICY command, which allows you to create a new masking policy or replace an existing one.

Using Dynamic Data Masking: This guide provides instructions on how to configure and use dynamic data masking in Snowflake, which is a feature that allows you to mask sensitive data based on the execution context of the user.

ALTER MASKING POLICY: This document explains the syntax and usage of the ALTER MASKING POLICY command, which allows you to modify the properties of an existing masking policy.

by Izetta at Mar 10, 2024, 09:32 AM

Limited Time Offer

25%

Off

Get Premium ARA-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aliza

3 months ago

Nope, they see the last 4 characters, right?

upvoted 0 times

...

Lyla

3 months ago

I think anyone with the Pl_ANALYTICS role only sees masked data.

upvoted 0 times

...

Kris

3 months ago

Wait, so the owner can't see it in clear text?

upvoted 0 times

...

Junita

4 months ago

Totally agree, that's how it works!

upvoted 0 times

...

Bettyann

4 months ago

The sysadmin can see the data in clear text.

upvoted 0 times

...

Misty

4 months ago

I feel like anyone with the Pl_ANALYTICS role would see the data masked completely, but I need to double-check that.

upvoted 0 times

...

Blossom

4 months ago

I think the Pl_ANALYTICS role might only see part of the credit card number, but I can't recall the exact details.

upvoted 0 times

...

Alton

4 months ago

This question feels similar to one we practiced where only certain roles could see the full data. I think the owner might have access.

upvoted 0 times

...

Ivory

5 months ago

I remember something about roles and permissions, but I'm not sure if sysadmin can see masked data.

upvoted 0 times

...

Haydee

5 months ago

I'm a bit unsure about this one. The masking policy looks straightforward, but the question about the roles is throwing me off. I'll need to review the Snowflake documentation on data masking to make sure I understand how the different roles work.

upvoted 0 times

...

Georgiana

5 months ago

This is a tricky one. The masking policy definition seems clear, but I'm not sure how it interacts with the different roles. I'll need to think through the scenarios carefully to determine the correct answer.

upvoted 0 times

...

Kristian

5 months ago

Okay, I think I've got this. The key is that the question states the Snowflake system roles have not been granted any additional roles. So the default behavior of the masking policy should apply. I'll double-check my work, but I'm feeling confident about this one.

upvoted 0 times

...

Deandrea

5 months ago

This looks like a straightforward question about data masking in Snowflake. I'll need to carefully read the masking policy definition and the sample data to determine the correct result.

upvoted 0 times

...

Aracelis

5 months ago

Hmm, I'm a bit confused by the different roles mentioned in the question. I'll need to make sure I understand how the masking policy interacts with the different roles before I can answer this.

upvoted 0 times

...

Van

5 months ago

Okay, I think I've got this. The forecast profit is represented by the distance between the total revenue line and the total cost line at the forecast sales volume. So the answer must be distance b.

upvoted 0 times

...

Chantay

5 months ago

The key to taking down a botnet is disrupting the communication between the bots and the command and control server. Option A is definitely the way to go here.

upvoted 0 times

...

Fletcher

5 months ago

Okay, let me think this through. Since the VLAN is untagged by the switch, we probably need to use the switchport trunk native vlan command to specify the VLAN that will be used for untagged traffic crossing the trunk.

upvoted 0 times

...