COF-C03 practice question 5 of 10
Snowflake's access control framework combines which models for securing data? (Select TWO).
Full set: 1,126 questionsSnowflake's access control framework is a hybrid model that integrates two well-established security paradigms. The first is Discretionary Access Control (DAC), where each securable object has an owner who has the discretion to grant access to that object. The second is Role-based Access Control (RBAC), where access privileges are assigned to roles, which are then granted to users. This combination allows for a flexible and scalable security model where object owners control initial access, and roles simplify the management of privileges for large numbers of users.
A. Attribute-based Access Control (ABAC) is supported via features like policies, but it is not one of the two foundational models of the core framework.
C. Access Control List (ACL) is a different model where permissions are attached directly to objects for specific users, which is less scalable than Snowflake's RBAC approach.
E. Rule-based Access Control (RuBAC) is a distinct model where access is determined by a set of rules, which is not the primary basis of Snowflake's framework.
1. Snowflake Documentation. (n.d.). Overview of Access Control. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-overview.html. In the section "Snowflake’s Access Control Model," it states, "Snowflake’s approach to access control combines aspects from both of the following models: Discretionary Access Control (DAC)... Role-based Access Control (RBAC)..."
Keep practicing
Take the free COF-C03 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other COF-C03 practice questions
- Question 1What is the primary purpose for configuring multiple Identity Providers, or IdPs, in Snow…
- Question 2At what level is the MIN_DATA_RETENTION_TIME_IN_DAYS parameter set?
- Question 3Which commands are restricted in owner's rights stored procedures? (Select TWO).
- Question 4Which views are included in the DATA SHARING USAGE schema? (Select TWO).
- Question 6True or False: Loading data into Snowflake requires that source data files be no larger t…
- Question 7True or False: Fail-safe can be disabled within a Snowflake account.
