COF-C02 · Question #378
How can a Snowflake administrator determine which user has accessed a database object that contains sensitive information?
The correct answer is C. Query the ACCESS_HlSTORY view in the ACCOUNT_USAGE schema. The ACCESS_HISTORY view in the ACCOUNT_USAGE schema records detailed information about queries and data access events, including which user ran a query, when, and which base objects (tables, columns) were accessed. This makes it the correct tool for auditing access to sensitive…
Question
How can a Snowflake administrator determine which user has accessed a database object that contains sensitive information?
Options
- AReview the granted privileges to the database object.
- BReview the row access policy for the database object.
- CQuery the ACCESS_HlSTORY view in the ACCOUNT_USAGE schema.
- DQuery the REPLICATION USAGE HISTORY view in the ORGANIZATION USAGE schema.
How the community answered
(44 responses)- A5% (2)
- C93% (41)
- D2% (1)
Explanation
The ACCESS_HISTORY view in the ACCOUNT_USAGE schema records detailed information about queries and data access events, including which user ran a query, when, and which base objects (tables, columns) were accessed. This makes it the correct tool for auditing access to sensitive objects. Reviewing granted privileges shows who has permission but not who actually accessed data. Row access policies control access but do not log it. REPLICATION_USAGE_HISTORY is specific to replication operations, not general data access.
Topics
Community Discussion
No community discussion yet for this question.