Snowflake SnowPro Core Practice Test 32
Question 310
For an original SnowPro Core educational scenario, consider: A recent query is not visible yet in an Account Usage view and an analyst concludes it never ran. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Check: Compare requested time window, privileges, ingestion lag and query history against a sample event.
- Change: Set workload-suitable AUTO_SUSPEND and AUTO_RESUME values and validate startup behavior and billing.
- Change: Select Information Schema or ACCOUNT_USAGE views based on required object scope, privileges, history and documented latency.
- Assume Account Usage records every event synchronously with no delay and shows every object to every role.
- Check: Compare service-level billing and account usage with warehouse usage for the relevant reporting period.
Explanation
Correct Answer
A:Acceptance: Monitoring reports show expected data at the promised freshness and scope without misinterpreting latency as absence. Applied case: A recent query is not visible yet in an Account Usage view and an analyst concludes it never ran.
C:Acceptance: Monitoring reports show expected data at the promised freshness and scope without misinterpreting latency as absence. Information Schema and Snowflake shared-account usage views provide different metadata scopes and refresh characteristics.
Incorrect Answers
B:Change: Set workload-suitable AUTO_SUSPEND and AUTO_RESUME values and validate startup behavior and billing. Information Schema and Snowflake shared-account usage views provide different metadata scopes and refresh characteristics.
D:For this select two assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it. Applied case: A recent query is not visible yet in an Account Usage view and an analyst concludes it never ran.
E:Check: Compare service-level billing and account usage with warehouse usage for the relevant reporting period. Information Schema and Snowflake shared-account usage views provide different metadata scopes and refresh characteristics.
Question 311
A Snowflake engineer is examining this platform situation: A developer receives SELECT directly through a shared administrator role and the company cannot revoke that privilege without affecting many applications. A proposed shortcut is: Grant ACCOUNTADMIN to every analyst to solve a missing table SELECT error. What should the Snowflake engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Grant ACCOUNTADMIN to every analyst to solve a missing table SELECT error.
- Define appropriate supported authentication policies and client-type restrictions per user population, testing changes before enforcement.
- Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
- Use a dedicated least-privilege service user with supported key-pair or workload-identity authentication and documented rotation.
Explanation
Correct Answer
C:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. Applied case: A developer receives SELECT directly through a shared administrator role and the company cannot revoke that privilege without affecting many applications.
Incorrect Answers
A:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. For this best change assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it.
B:Define appropriate supported authentication policies and client-type restrictions per user population, testing changes before enforcement. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
D:Use a dedicated least-privilege service user with supported key-pair or workload-identity authentication and documented rotation. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 312
A Snowflake implementation review finds: A developer receives SELECT directly through a shared administrator role and the company cannot revoke that privilege without affecting many applications. The team proposes: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles. Which platform principle most strongly supports the recommended response? Select ONE best answer.
- Reading a table normally requires privileges on its containing database and schema as well as SELECT on the table; warehouse USAGE is separate.
- Identity federation centralizes authentication while Snowflake role authorization remains a separate explicit layer.
- Resource monitors govern supported warehouse credit consumption and are not a universal spending cap for all Snowflake services.
- A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Explanation
Correct Answer
D:Relevant validation before approval: Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user. This principle explains the proposed technical approach, which is: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
Incorrect Answers
A:Reading a table normally requires privileges on its containing database and schema as well as SELECT on the table; warehouse USAGE is separate. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
B:Identity federation centralizes authentication while Snowflake role authorization remains a separate explicit layer. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
C:Resource monitors govern supported warehouse credit consumption and are not a universal spending cap for all Snowflake services. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 313
The data platform team has not yet approved changes. Current evidence indicates: A developer receives SELECT directly through a shared administrator role and the company cannot revoke that privilege without affecting many applications. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Check SHOW GRANTS for database, schema, table and selected warehouse on the active role.
- Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user.
- Compare effective policy assignments, actual connection methods and login tests for both human and service identities.
- Inspect effective retention parameters and attempt a safe as-of query at an approved timestamp.
Explanation
Correct Answer
B:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. If confirmed, the proportionate intervention is: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
Incorrect Answers
A:Check SHOW GRANTS for database, schema, table and selected warehouse on the active role. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
C:Compare effective policy assignments, actual connection methods and login tests for both human and service identities. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
D:Inspect effective retention parameters and attempt a safe as-of query at an approved timestamp. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 314
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A developer receives SELECT directly through a shared administrator role and the company cannot revoke that privilege without affecting many applications. The service owner needs positive and negative results and evidence that legitimate data workflows still function. Which acceptance result demonstrates correct platform behavior without disrupting authorized workflows? Select ONE best answer.
- Auditors can identify relevant usage and downstream dependencies without granting ordinary analysts privileged raw audit access.
- Intended users can perform only authorized operations, and the privilege chain is auditable.
- Recovery regions receive permitted objects and users can resume using the planned endpoint within agreed objectives.
- Each role sees only authorized geographic records from the same governed table.
Explanation
Correct Answer
B:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. The approved implementation step was: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
Incorrect Answers
A:Auditors can identify relevant usage and downstream dependencies without granting ordinary analysts privileged raw audit access. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
C:Recovery regions receive permitted objects and users can resume using the planned endpoint within agreed objectives. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
D:Each role sees only authorized geographic records from the same governed table. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 315
An implementation sign-off request identifies the following problem: A developer receives SELECT directly through a shared administrator role and the company cannot revoke that privilege without affecting many applications. Which paired technical change and validation should close the implementation review? Select ONE best answer.
- Change: Apply account- or user-scope network policy with accurate allowed sources and tested break-glass access. Verify: Record source IP addresses, policy precedence, login failures and emergency recovery path under safe testing.
- Change: Set supported retention values per object type, edition and legal recovery need, with measured storage impact. Verify: Inspect effective retention parameters and attempt a safe as-of query at an approved timestamp.
- Change: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles. Verify: Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user.
- Change: Assign controlled imported privileges or supported database-role access to the shared SNOWFLAKE reporting database. Verify: Test selected ACCOUNT_USAGE views under a read-only audit role and verify available columns and latency.
Explanation
Correct Answer
C:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. The change is successful only when: Intended users can perform only authorized operations, and the privilege chain is auditable.
Incorrect Answers
A:Change: Apply account- or user-scope network policy with accurate allowed sources and tested break-glass access.
B:Change: Set supported retention values per object type, edition and legal recovery need, with measured storage impact.
D:Change: Assign controlled imported privileges or supported database-role access to the shared SNOWFLAKE reporting database. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 316
A Snowflake engineer is examining this platform situation: A reporting role cannot see a curated table even though the user has a different role that owns the object. A proposed shortcut is: Grant ACCOUNTADMIN to every analyst to solve a missing table SELECT error. What should the Snowflake engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
- Grant ACCOUNTADMIN to every analyst to solve a missing table SELECT error.
- Configure supported federated SSO and multifactor authentication with user provisioning and offboarding controls.
- Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
Explanation
Correct Answer
D:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. Applied case: A reporting role cannot see a curated table even though the user has a different role that owns the object.
Incorrect Answers
A:Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
B:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. Use this instead: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
C:Configure supported federated SSO and multifactor authentication with user provisioning and offboarding controls. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 317
A Snowflake implementation review finds: A reporting role cannot see a curated table even though the user has a different role that owns the object. The team proposes: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles. Which platform principle most strongly supports the recommended response? Select ONE best answer.
- Resource monitors govern supported warehouse credit consumption and are not a universal spending cap for all Snowflake services.
- A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
- Tags carry metadata labels and can support classification and policy attachment, but merely assigning a label does not automatically encrypt or hide every value.
- Access and lineage metadata serve distinct questions about observed activity and downstream object relationships.
Explanation
Correct Answer
B:Relevant validation before approval: Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user. Applied case: A reporting role cannot see a curated table even though the user has a different role that owns the object.
Incorrect Answers
A:Resource monitors govern supported warehouse credit consumption and are not a universal spending cap for all Snowflake services. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
C:Tags carry metadata labels and can support classification and policy attachment, but merely assigning a label does not automatically encrypt or hide every value. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
D:Access and lineage metadata serve distinct questions about observed activity and downstream object relationships. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 318
The data platform team has not yet approved changes. Current evidence indicates: A reporting role cannot see a curated table even though the user has a different role that owns the object. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user.
- Create a controlled new table after configuring grants and verify permissions separately from an old table.
- Check schema type, object ownership and whether the correct role can GRANT SELECT in a controlled test.
- Query the same protected column under authorized and limited roles and review masking-policy bindings.
Explanation
Correct Answer
A:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. Confirm afterward that: Intended users can perform only authorized operations, and the privilege chain is auditable.
Incorrect Answers
B:Create a controlled new table after configuring grants and verify permissions separately from an old table. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
C:Check schema type, object ownership and whether the correct role can GRANT SELECT in a controlled test. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
D:Query the same protected column under authorized and limited roles and review masking-policy bindings. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 319
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A reporting role cannot see a curated table even though the user has a different role that owns the object. The service owner needs positive and negative results and evidence that legitimate data workflows still function. Which acceptance result demonstrates correct platform behavior without disrupting authorized workflows? Select ONE best answer.
- Dataset sharing requires the designated governance authority instead of arbitrary table-owner discretion.
- Each dataset has a documented recovery horizon consistent with actual platform support.
- Intended users can perform only authorized operations, and the privilege chain is auditable.
- The department can query the designated database while unrelated databases remain private.
Explanation
Correct Answer
C:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. The result must be validated using the documented dataset or access context.
Incorrect Answers
A:Dataset sharing requires the designated governance authority instead of arbitrary table-owner discretion. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
B:Each dataset has a documented recovery horizon consistent with actual platform support. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
D:The department can query the designated database while unrelated databases remain private. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
Question 320
For an original SnowPro Core educational scenario, consider: A reporting role cannot see a curated table even though the user has a different role that owns the object. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Check: Inspect tags on representative new columns and policy bindings across changing schemas.
- Change: Set the correct primary role and authorized secondary-role configuration, remembering that object creation ownership uses the primary role.
- Check: Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user.
- Change: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
- Grant ACCOUNTADMIN to every analyst to solve a missing table SELECT error.
Explanation
Correct Answer
C:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. Required intervention: Create least-privilege custom roles with explicit object grants and appropriate parent-role inheritance instead of using broad system roles.
D:A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles. Evidence: Inspect SHOW GRANTS, role hierarchy and active session role for the target object and user.
Incorrect Answers
A:Check: Inspect tags on representative new columns and policy bindings across changing schemas. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
B:Change: Set the correct primary role and authorized secondary-role configuration, remembering that object creation ownership uses the primary role. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.
E:For this select two assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it. A role inherits the privileges of roles granted to it, and users acquire permissions through their assigned active roles.