Snowflake's access control framework combines which models for securing data? (Select TWO).

Snowflake's access control framework is a hybrid model that integrates two well-established security paradigms. The first is Discretionary Access Control (DAC), where each securable object has an owner who has the discretion to grant access to that object. The second is Role-based Access Control (RBAC), where access privileges are assigned to roles, which are then granted to users. This combination allows for a flexible and scalable security model where object owners control initial access, and roles simplify the management of privileges for large numbers of users.

A. Attribute-based Access Control (ABAC) is supported via features like policies, but it is not one of the two foundational models of the core framework.

C. Access Control List (ACL) is a different model where permissions are attached directly to objects for specific users, which is less scalable than Snowflake's RBAC approach.

E. Rule-based Access Control (RuBAC) is a distinct model where access is determined by a set of rules, which is not the primary basis of Snowflake's framework.

1. Snowflake Documentation. (n.d.). Overview of Access Control. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-overview.html. In the section "Snowflake’s Access Control Model," it states, "Snowflake’s approach to access control combines aspects from both of the following models: Discretionary Access Control (DAC)... Role-based Access Control (RBAC)..."