What does a masking policy consist of in Snowflake?

Question

Options

• AA single data type, with one or more conditions, and one or more masking functions
• BA single data type, with only one condition, and only one masking function
• CMultiple data types, with only one condition, and one or more masking functions
• DMultiple data types, with one or more conditions, and one or more masking functions

• A
  90% (61)
• B
  6% (4)
• C
  1% (1)
• D
  3% (2)

Explanation

A Snowflake dynamic data masking policy is defined with a single data type (the input and output data types must match - you cannot change the data type of the masked value), one or more conditional expressions (e.g., checking the role of the querying user), and one or more masking functions that define what the data looks like for different roles or conditions. The policy does not support multiple data types in a single definition, which rules out options C and D. Option B is too restrictive because a policy can have multiple conditions and multiple masking functions (e.g., return full value for admin, partial mask for analyst, full mask for all others).

No community discussion yet for this question.