SnowPro Security SEA-C01 Practice Questions & Answers • ExamPrepare

19 questions in this view

Page 1 of 4

Question 1

A Security Engineer needs to set up a network policy for a Snowflake account using AWS. The policy must protect both Snowflake services and internal stages from incoming traffic based on the IP address of the request.

Which combination of settings must be applied in the network rule? (Select TWO).

Set the MODE parameter to = INGRESS .
Set the VALUES_LIST to the resolving domain.
Set the internet protocol to TYPE = AWSVPCEID .
Set the ENFORCE_NETWORK_RULES_FOR_INTERNAL_STAGES to = True .
Set the MODE parameter to = INTERNAL_STAGE .

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

During a security incident, a Security Engineer identifies unexpected outbound HTTP calls coming from a Snowpark Python procedure that is accessing the network externally.

Without altering the Python code, what should the Engineer do?

Identify and remove all secrets from the secret manager.
Run an ALTER EXTERNAL ACCESS INTEGRATION ... SET ENABLED = FALSE script.
Run an ALTER API INTEGRATION … SET ENABLED = FALSE script.
Run an ALTER NETWORK POLICY ... SET BLOCKED_IP_LIST = ('0.0.0.0/0') command.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A permanent table, table_A is configured to inherit a DATA_RETENTION_TIME_IN_DAYS = 90 parameter from the schema in which it resides.

This command is run:

ALTER TABLE table_A SET DATA_RETENTION_TIME_IN_DAYS = 1;

How will this impact versions of the table that are more than 1 day but less than 90 days old?

The versions will be retained until the schema or database is dropped.
The versions can be queried in Time Travel until a background process moves them to Fail-safe.
The versions will be removed and are unrecoverable once the command runs.
The versions will be included in a permanent table snapshot that can be queried for 90 days.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A company needs to identify and classify sensitive data across multiple databases. Some data patterns are standard (email addresses and phone numbers), while others are industry-specific (account numbers and transaction codes).

Requirements include:

1. The ability to audit which tables have been classified

2. A protocol for tracking how tags have propagated through the ETL pipelines

Which configuration will meet these requirements?

Use Snowflake's built-in system tags for the classifications, manually apply tags to each table and column, and disable automatic tag propagation to maintain control over tag assignment.
Create custom classifiers for all data types including standard patterns, manually track tag lineage using external spreadsheets, and audit tag usage using custom SQL queries.
Implement automatic data classification for standard patterns, create custom classifiers for industry-specific data, enable automatic tag propagation, and use the TAG_REFERENCES views to audit tag usage.
Implement automatic classification for both standard and custom patterns using classification profiles, apply tags at the schema level for consistency, enable tag propagation, and use Snowsight to monitor data lineage.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A Security Engineer is preparing for a compliance audit. Requirements include:

1. Identify and classify sensitive customer data (e.g., email, credit card numbers)

2. Apply dynamic masking policies based on user roles

3. Ensure that governance policies are consistently applied across all relevant columns

4. Maintain visibility into how these policies are being used and monitored

Which combination of Snowflake features and services should be used?

1. Row-level security 2. Object dependencies 3. Access_History view 4. Secure views
1. Data classification 2. Tag-based masking policies 3. Object tagging 4. Snowsight Horizon Catalog
1. Time Travel 2. Fail-safe 3. Column-level security 4. External functions
1. Materialized views 2. Data sharing 3. Secure User-Defined Functions (UDFs) 4. Data Marketplace

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A Security Engineer has the ACCOUNTADMIN role in a data provider account and needs to set up a private listing that shares a database with a consumer account. There are three data subjects that the consumer needs to access, FINANCE, RETAIL, and DISTRIBUTION. The subjects are stored in three different schemas in the database.

The consumer needs to be able to segregate access by data subject in the consumer account.

How should these requirements be met? (Select TWO).

Create three shares, one for each subject area, and GRANT REFERENCE_USAGE ON DATABASE to the consumer on the shared database.
Use DATABASE ROLES to control access to the schemas representing the shared subject areas.
GRANT DATABASE ROLES to specific segregated roles in the consumer account.
GRANT IMPORTED PRIVILEGES to the SHARE in the provider account.
USE ROLE SECURITYADMIN to grant object access in the consumer account.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.