nerdexam
Snowflake

COF-C02 · Question #378

How can a Snowflake administrator determine which user has accessed a database object that contains sensitive information?

The correct answer is C. Query the ACCESS_HlSTORY view in the ACCOUNT_USAGE schema. The ACCESS_HISTORY view in the ACCOUNT_USAGE schema records detailed information about queries and data access events, including which user ran a query, when, and which base objects (tables, columns) were accessed. This makes it the correct tool for auditing access to sensitive…

Data Governance

Question

How can a Snowflake administrator determine which user has accessed a database object that contains sensitive information?

Options

  • AReview the granted privileges to the database object.
  • BReview the row access policy for the database object.
  • CQuery the ACCESS_HlSTORY view in the ACCOUNT_USAGE schema.
  • DQuery the REPLICATION USAGE HISTORY view in the ORGANIZATION USAGE schema.

How the community answered

(44 responses)
  • A
    5% (2)
  • C
    93% (41)
  • D
    2% (1)

Explanation

The ACCESS_HISTORY view in the ACCOUNT_USAGE schema records detailed information about queries and data access events, including which user ran a query, when, and which base objects (tables, columns) were accessed. This makes it the correct tool for auditing access to sensitive objects. Reviewing granted privileges shows who has permission but not who actually accessed data. Row access policies control access but do not log it. REPLICATION_USAGE_HISTORY is specific to replication operations, not general data access.

Topics

#Data Auditing#ACCESS_HISTORY View#User Access Tracking#Sensitive Data Access

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice