A Snowflake Administrator needs to ensure that sensitive corporate data in Snowflake tables is not visible to end users, but is partially visible to functional managers. How can this requirement be…

The correct answer is B. Use dynamic data masking. Dynamic Data Masking (DDM) allows administrators to define masking policies on columns that control what users see based on their role. For example, a policy can show the full value to managers but show a masked or partially obscured value (e.g., 'XXX-XX-1234' for SSNs) to end…

Data Governance

Question

A Snowflake Administrator needs to ensure that sensitive corporate data in Snowflake tables is not visible to end users, but is partially visible to functional managers. How can this requirement be met?

Options

AUse data encryption.
BUse dynamic data masking.
CUse secure materialized views.
DRevoke all roles for functional managers and end users.

How the community answered

(26 responses)

A
8% (2)
B
73% (19)
C
15% (4)
D
4% (1)

Explanation

Dynamic Data Masking (DDM) allows administrators to define masking policies on columns that control what users see based on their role. For example, a policy can show the full value to managers but show a masked or partially obscured value (e.g., 'XXX-XX-1234' for SSNs) to end users - or show nothing at all. This role-based, column-level control makes DDM the correct fit. Encryption protects data at rest but doesn't provide role-based partial visibility. Secure materialized views control row/column access but not partial masking. Revoking roles would deny access entirely, not partially reveal data.

Topics

#Dynamic Data Masking#Data Governance#Security Policies#Access Control

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice