A company needs to allow some users to see Personally Identifiable Information (PII) while limiting other users from seeing the full value of the PII. Which Snowflake feature will support this?

The correct answer is B. Data masking policies. Dynamic Data Masking Policies (B) allow column-level masking of sensitive data based on the querying user's role. For example, a privileged role sees the full SSN while others see '*--XXXX'. This is the only option that selectively reveals partial vs. full data at the column…

Data Governance

Question

Options

ARow access policies
BData masking policies
CData encryption
DRole based access control

How the community answered

(35 responses)

A
3% (1)
B
77% (27)
C
11% (4)
D
9% (3)

Explanation

Dynamic Data Masking Policies (B) allow column-level masking of sensitive data based on the querying user's role. For example, a privileged role sees the full SSN while others see '*--XXXX'. This is the only option that selectively reveals partial vs. full data at the column level. Row Access Policies (A) control which rows a user can see, not the content of individual columns. Data Encryption (C) protects data at rest and in transit but does not provide role-based visibility control. Role-Based Access Control (D) can restrict access to entire objects but cannot partially mask a column's value within a result set.

Topics

#Data masking#PII#Data governance#Security policies

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice