Snowflake ARA-C01 問題集

質問 1：
Consider the following scenario where a masking policy is applied on the CREDICARDND column of the CREDITCARDINFO table. The masking policy definition Is as follows:

Sample data for the CREDITCARDINFO table is as follows:
NAME EXPIRYDATE CREDITCARDNO
JOHN DOE 2022-07-23 4321 5678 9012 1234
if the Snowflake system rotes have not been granted any additional roles, what will be the result?
A. The owner of the table will see the CREDICARDND column data in clear text.
B. Anyone with the Pl_ANALYTICS role will see the last 4 characters of the CREDICARDND column data in dear text.
C. The sysadmin can see the CREDICARDND column data in clear text.
D. Anyone with the Pl_ANALYTICS role will see the CREDICARDND column as*** 'MASKED* **'.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
At which object type level can the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY SESSION POLICY privileges be granted?
A. Schema
B. Database
C. Global
D. Table
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A company wants to deploy its Snowflake accounts inside its corporate network with no visibility on the internet. The company is using a VPN infrastructure and Virtual Desktop Infrastructure (VDI) for its Snowflake users. The company also wants to re-use the login credentials set up for the VDI to eliminate redundancy when managing logins.
What Snowflake functionality should be used to meet these requirements? (Choose two.)
A. Use private connectivity from a cloud provider.
B. Set up replication to allow users to connect from outside the company VPN.
C. Use a proxy Snowflake account outside the VPN, enabling client redirect for user logins.
D. Set up SSO for federated authentication.
E. Provision a unique company Tri-Secret Secure key.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A global company needs to securely share its sales and Inventory data with a vendor using a Snowflake account.
The company has its Snowflake account In the AWS eu-west 2 Europe (London) region. The vendor's Snowflake account Is on the Azure platform in the West Europe region. How should the company's Architect configure the data share?
A. 1. Create a share.
2. Add objects to the share.
3. Add a consumer account to the share for the vendor to access.
B. 1. Create a new role called db_share.
2. Grant the db_share role privileges to read data from the company database and schema.
3. Create a user for the vendor.
4. Grant the ds_share role to the vendor's users.
C. 1. Promote an existing database in the company's local account to primary.
2. Replicate the database to Snowflake on Azure in the West-Europe region.
3. Create a share and add objects to the share.
4. Add a consumer account to the share for the vendor to access.
D. 1. Create a share.
2. Create a reader account for the vendor to use.
3. Add the reader account to the share.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which security, governance, and data protection features require, at a MINIMUM, the Business Critical edition of Snowflake? (Choose two.)
A. Periodic rekeying of encrypted data
B. AWS, Azure, or Google Cloud private connectivity to Snowflake
C. Extended Time Travel (up to 90 days)
D. Federated authentication and SSO
E. Customer-managed encryption keys through Tri-Secret Secure
正解：B,E
解説: (Topexam メンバーにのみ表示されます)