Snowflake's hierarchical key mode includes which keys? (Select TWO).

Snowflake's hierarchical key model provides robust, end-to-end encryption. This multi-layered model consists of four key levels. At the top is a root key managed by Snowflake in a hardware security module (HSM). This key protects all account master keys. Each account master key (AMK) is used to encrypt all the table master keys (TMKs) within that account. In turn, each TMK encrypts the individual file keys associated with a specific table. These file keys are responsible for the direct encryption of data stored in Snowflake's micro-partitions. This structure allows for periodic key rotation and ensures a strong separation of duties and security.

B. Database master keys: The Snowflake encryption hierarchy operates with table master keys, which are a level below account master keys, not database master keys.
D. Secure view keys: Secure views are a data access control and visibility feature; they are not a component of the fundamental data-at-rest encryption key hierarchy.
E. Schema master keys: The encryption model is granular at the table level, using table master keys, not a broader schema-level master key.

1. Snowflake Documentation. (2024). Encryption Key Management. Snowflake Inc. Retrieved from https://docs.snowflake.com/en/user-guide/security-encryption-end-to-end#encryption-key-management.

Reference Details: The section "Encryption Key Management" explicitly outlines the four-level key hierarchy: "The root of trust"

"Account master keys"

"Table master keys"

and "File keys". This directly confirms that options A and C are core components of the model.