DEA-C02 Question #128: Real Exam Question with Answer & Explanation

Question

A Data Engineer needs to create a tag-based masking policy to determine whether data should be masked based on the value of the label string assigned to column salary in table staff. The Engineer created the tag and masking policy with these commands: USE SCHEMA governance.tags; CREATE TAG hr_col_salary; USE ROLE masking_admin; USE SCHEMA governance.masking_policies; CREATE MASKING POLICY salary_mask_tag_policy AS (val number) RETURNS number -> CASE WHEN SYSTEM$GET_TAG_ON_CURRENT_COLUMN('tags.hr_col_salary') = 'visible' or 'payroll_admin' = current_role() THEN val ELSE -1 END; ALTER TAG hr_col_salary SET MASKING POLICY salary_mask_tag_policy; How should the Engineer apply the tag to ensure that only users with the payroll_admin role can access the data? A. B. C. D.

Options

• AALTER TABLE staff MODIFY COLUMN salary SET TAG governance.tags.hr_col_salary = 'masked';
• BALTER TABLE staff MODIFY COLUMN salary SET TAG governance.tags.hr_col_salary = 'visible';
• CALTER TABLE staff MODIFY COLUMN salary SET MASKING POLICY governance.masking_policies.salary_mask_tag_policy;
• DALTER TABLE staff MODIFY COLUMN salary UNSET MASKING POLICY governance.masking_policies.salary_mask_tag_policy;