Snowflake SnowPro Core Practice Test 37
Question 360
For an original SnowPro Core educational scenario, consider: A schema applies grants to ALL current tables yet no policy covers tables created next month. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Change: Use governed object tags, supported classification methods and appropriate tag-based policy integration.
- Change: Define appropriate FUTURE grants on the intended database or schema in addition to any existing-object grants.
- Check: Test identical queries under representative roles and verify permitted and denied row counts.
- Reapply one-time grants on existing tables and assume it automatically covers future objects.
- Check: Create a controlled new table after configuring grants and verify permissions separately from an old table.
Explanation
Correct Answer
B:Grants on ALL existing objects differ from FUTURE grants that apply when matching objects are created later. Evidence: Create a controlled new table after configuring grants and verify permissions separately from an old table.
E:Grants on ALL existing objects differ from FUTURE grants that apply when matching objects are created later. Required intervention: Define appropriate FUTURE grants on the intended database or schema in addition to any existing-object grants.
Incorrect Answers
A:Change: Use governed object tags, supported classification methods and appropriate tag-based policy integration. Grants on ALL existing objects differ from FUTURE grants that apply when matching objects are created later.
C:Check: Test identical queries under representative roles and verify permitted and denied row counts. Grants on ALL existing objects differ from FUTURE grants that apply when matching objects are created later.
D:For this select two assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it. Grants on ALL existing objects differ from FUTURE grants that apply when matching objects are created later.
Question 361
A Snowflake engineer is examining this platform situation: A retiring service role owns several production tables and a new deployment role must control them without orphaning access. A proposed shortcut is: Drop the former owner role before checking what objects and grants it controls. What should the Snowflake engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Attach a supported row access policy that evaluates appropriate identity or role context and filters rows consistently.
- Assign controlled imported privileges or supported database-role access to the shared SNOWFLAKE reporting database.
- Drop the former owner role before checking what objects and grants it controls.
- Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
Explanation
Correct Answer
D:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. Applied case: A retiring service role owns several production tables and a new deployment role must control them without orphaning access.
Incorrect Answers
A:Attach a supported row access policy that evaluates appropriate identity or role context and filters rows consistently. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:Assign controlled imported privileges or supported database-role access to the shared SNOWFLAKE reporting database. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
C:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. For this best change assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it.
Question 362
A Snowflake implementation review finds: A retiring service role owns several production tables and a new deployment role must control them without orphaning access. The team proposes: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation. Which platform principle most strongly supports the recommended response? Select ONE best answer.
- Row access policies provide centralized row-level access decisions that do not depend on every consuming SQL author remembering a filter.
- Storage integrations delegate external cloud access through controlled identity relationships, reducing exposure from embedded static credentials.
- Query authorization can consider active primary and secondary roles, while CREATE object ownership and required creation privileges follow primary-role semantics.
- OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
Explanation
Correct Answer
D:Relevant validation before approval: Compare ownership and dependent grants before and after transfer using SHOW GRANTS. This principle explains the proposed technical approach, which is: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
Incorrect Answers
A:Row access policies provide centralized row-level access decisions that do not depend on every consuming SQL author remembering a filter. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:Storage integrations delegate external cloud access through controlled identity relationships, reducing exposure from embedded static credentials. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
C:This option addresses a different Snowflake technical topic (Primary versus secondary roles) rather than the documented Ownership transfers and grant preservation decision.
Question 363
The data platform team has not yet approved changes. Current evidence indicates: A retiring service role owns several production tables and a new deployment role must control them without orphaning access. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Compare effective policy assignments, actual connection methods and login tests for both human and service identities.
- Inspect replication group membership, refresh history, secondary object state and controlled cutover scenarios.
- Test selected ACCOUNT_USAGE views under a read-only audit role and verify available columns and latency.
- Compare ownership and dependent grants before and after transfer using SHOW GRANTS.
Explanation
Correct Answer
D:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. If confirmed, the proportionate intervention is: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
Incorrect Answers
A:Compare effective policy assignments, actual connection methods and login tests for both human and service identities. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:Inspect replication group membership, refresh history, secondary object state and controlled cutover scenarios. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
C:Test selected ACCOUNT_USAGE views under a read-only audit role and verify available columns and latency. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
Question 364
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A retiring service role owns several production tables and a new deployment role must control them without orphaning access. The service owner needs positive and negative results and evidence that legitimate data workflows still function. Which acceptance result demonstrates correct platform behavior without disrupting authorized workflows? Select ONE best answer.
- The new steward manages objects while approved consumers retain their intended privileges.
- Dataset sharing requires the designated governance authority instead of arbitrary table-owner discretion.
- The department can query the designated database while unrelated databases remain private.
- New approved tables inherit intended least-privilege access without relying on daily manual scripts.
Explanation
Correct Answer
A:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. The approved implementation step was: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
Incorrect Answers
B:Dataset sharing requires the designated governance authority instead of arbitrary table-owner discretion. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
C:The department can query the designated database while unrelated databases remain private. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
D:New approved tables inherit intended least-privilege access without relying on daily manual scripts. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
Question 365
An implementation sign-off request identifies the following problem: A retiring service role owns several production tables and a new deployment role must control them without orphaning access. Which paired technical change and validation should close the implementation review? Select ONE best answer.
- Change: Use a managed access schema and delegate grant decisions to the schema owner or a role with MANAGE GRANTS. Verify: Check schema type, object ownership and whether the correct role can GRANT SELECT in a controlled test.
- Change: Set supported retention values per object type, edition and legal recovery need, with measured storage impact. Verify: Inspect effective retention parameters and attempt a safe as-of query at an approved timestamp.
- Change: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation. Verify: Compare ownership and dependent grants before and after transfer using SHOW GRANTS.
- Change: Use supported storage integrations tied to narrowly scoped cloud IAM permissions and approved external locations. Verify: Check integration grants, cloud IAM role trust, allowed prefixes and controlled stage listing.
Explanation
Correct Answer
C:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. The change is successful only when: The new steward manages objects while approved consumers retain their intended privileges.
Incorrect Answers
A:Change: Use a managed access schema and delegate grant decisions to the schema owner or a role with MANAGE GRANTS.
B:Change: Set supported retention values per object type, edition and legal recovery need, with measured storage impact. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
D:Change: Use supported storage integrations tied to narrowly scoped cloud IAM permissions and approved external locations. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
Question 366
A Snowflake engineer is examining this platform situation: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table. A proposed shortcut is: Drop the former owner role before checking what objects and grants it controls. What should the Snowflake engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Define appropriate FUTURE grants on the intended database or schema in addition to any existing-object grants.
- Drop the former owner role before checking what objects and grants it controls.
- Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
- Assign controlled imported privileges or supported database-role access to the shared SNOWFLAKE reporting database.
Explanation
Correct Answer
C:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. Applied case: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table.
Incorrect Answers
A:Define appropriate FUTURE grants on the intended database or schema in addition to any existing-object grants. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. Use this instead: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
D:Assign controlled imported privileges or supported database-role access to the shared SNOWFLAKE reporting database. An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table.
Question 367
A Snowflake implementation review finds: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table. The team proposes: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation. Which platform principle most strongly supports the recommended response? Select ONE best answer.
- OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
- Nonhuman access should have isolated credentials and scoped roles; sharing personal logins obscures ownership and magnifies credential risk.
- Resource monitors govern supported warehouse credit consumption and are not a universal spending cap for all Snowflake services.
- Storage integrations delegate external cloud access through controlled identity relationships, reducing exposure from embedded static credentials.
Explanation
Correct Answer
A:Relevant validation before approval: Compare ownership and dependent grants before and after transfer using SHOW GRANTS. Applied case: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table.
Incorrect Answers
B:Nonhuman access should have isolated credentials and scoped roles; sharing personal logins obscures ownership and magnifies credential risk. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
C:This option addresses a different Snowflake technical topic (Resource monitors and credit limits) rather than the documented Ownership transfers and grant preservation decision.
D:Storage integrations delegate external cloud access through controlled identity relationships, reducing exposure from embedded static credentials. An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table.
Question 368
The data platform team has not yet approved changes. Current evidence indicates: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Inspect query references, policy evaluation or access metadata and lineage edges for representative controlled activity.
- Create a controlled new table after configuring grants and verify permissions separately from an old table.
- Compare ownership and dependent grants before and after transfer using SHOW GRANTS.
- Query the same protected column under authorized and limited roles and review masking-policy bindings.
Explanation
Correct Answer
C:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. Confirm afterward that: The new steward manages objects while approved consumers retain their intended privileges.
Incorrect Answers
A:Inspect query references, policy evaluation or access metadata and lineage edges for representative controlled activity. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:Create a controlled new table after configuring grants and verify permissions separately from an old table. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
D:Query the same protected column under authorized and limited roles and review masking-policy bindings. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
Question 369
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table. The service owner needs positive and negative results and evidence that legitimate data workflows still function. Which acceptance result demonstrates correct platform behavior without disrupting authorized workflows? Select ONE best answer.
- New approved tables inherit intended least-privilege access without relying on daily manual scripts.
- Approved clients connect while unexpected source networks are rejected before sensitive work proceeds.
- Auditors can identify relevant usage and downstream dependencies without granting ordinary analysts privileged raw audit access.
- The new steward manages objects while approved consumers retain their intended privileges.
Explanation
Correct Answer
D:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. The result must be validated using the documented dataset or access context.
Incorrect Answers
A:New approved tables inherit intended least-privilege access without relying on daily manual scripts. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:Approved clients connect while unexpected source networks are rejected before sensitive work proceeds. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
C:Auditors can identify relevant usage and downstream dependencies without granting ordinary analysts privileged raw audit access. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
Question 370
For an original SnowPro Core educational scenario, consider: An ownership transfer unexpectedly affects prior grants, leaving a reporting service unable to SELECT from the table. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Drop the former owner role before checking what objects and grants it controls.
- Change: Apply dynamic masking policies with role-aware conditions to appropriately classified sensitive columns.
- Check: Compare ownership and dependent grants before and after transfer using SHOW GRANTS.
- Change: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
- Check: Check schema type, object ownership and whether the correct role can GRANT SELECT in a controlled test.
Explanation
Correct Answer
C:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. Required intervention: Plan a controlled GRANT OWNERSHIP transfer with documented handling of existing grants and post-transfer validation.
D:OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed. Evidence: Compare ownership and dependent grants before and after transfer using SHOW GRANTS.
Incorrect Answers
A:For this select two assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
B:Change: Apply dynamic masking policies with role-aware conditions to appropriately classified sensitive columns. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
E:Check: Check schema type, object ownership and whether the correct role can GRANT SELECT in a controlled test. OWNERSHIP grants control object management, and transferring ownership has specific grant-handling semantics that must be reviewed.
