Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Snowflake ARA-R01 Exam - Topic 1 Question 43 Discussion

When activating Tri-Secret Secure in a hierarchical encryption model in a Snowflake account, at what level is the customer-managed key used?
B) At the account level (AMK)
A) At the root level (HSM)
C) At the table level (TMK)
D) At the micro-partition level

Snowflake ARA-R01 Exam - Topic 1 Question 43 Discussion

Actual exam question for Snowflake's ARA-R01 exam
Question #: 43
Topic #: 1
[All ARA-R01 Questions]

When activating Tri-Secret Secure in a hierarchical encryption model in a Snowflake account, at what level is the customer-managed key used?

Show Suggested Answer Hide Answer
Suggested Answer: B

Tri-Secret Secure is a feature that allows customers to use their own key, called the customer-managed key (CMK), in addition to the Snowflake-managed key, to create a composite master key that encrypts the data in Snowflake. The composite master key is also known as the account master key (AMK), as it is unique for each account and encrypts the table master keys (TMKs) that encrypt the file keys that encrypt the data files. The customer-managed key is used at the account level, not at the root level, the table level, or the micro-partition level.The root level is protected by a hardware security module (HSM), the table level is protected by the TMKs, and the micro-partition level is protected by the file keys12.Reference:

Understanding Encryption Key Management in Snowflake

Tri-Secret Secure FAQ for Snowflake on AWS


by Vivan at Apr 03, 2026, 06:31 PM

Limited Time Offer

25%

Off

Get Premium ARA-R01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lettie
1 day ago
I think it's at the account level (AMK). Makes sense for security.
upvoted 0 times
...
Tequila
6 days ago
I’m surprised it’s not at the table level!
upvoted 0 times
...
Jesusita
12 days ago
Definitely not micro-partition level, that's for sure.
upvoted 0 times
...
Tula
17 days ago
Wait, I thought it was at the root level?
upvoted 0 times
...
Lynsey
2 months ago
Totally agree, AMK is the right answer!
upvoted 0 times
...
Dong
2 months ago
It's used at the account level (AMK).
upvoted 0 times
...
Cristen
3 months ago
I thought it was at the micro-partition level, but now I'm second-guessing myself after reviewing the material.
upvoted 0 times
...
Devora
3 months ago
I feel like it might be at the table level since that's where a lot of encryption happens, but I could be mixing it up with another topic.
upvoted 0 times
...
Delsie
3 months ago
I remember a practice question that mentioned the root level, but I can't recall if that was for Tri-Secret Secure specifically.
upvoted 0 times
...
Mollie
4 months ago
I think the customer-managed key is used at the account level, but I'm not entirely sure.
upvoted 0 times
...

Save Cancel