SOL-C01 Question #189: Real Exam Question with Answer & Explanation

Question

You have a requirement to grant a third-party vendor access to specific data files stored in an internal stage within your Snowflake environment. You want to use pre-signed URLs for secure and time-limited access. Which of the following steps are necessary to achieve this securely?

Options

• ACreate an internal stage, upload the files, and generate a pre-signed URL using the ` function,
• BCreate an external stage pointing to an external storage location (like AWS S3), upload the files,
• CGrant the 'USAGE privilege on the internal stage to the vendor's Snowflake user.
• DGenerate the pre-signed URL using the `SYSTEM$GET PRESIGNED URL' function, ensuring that
• EGrant the privilege directly on the files within the internal stage to the vendor's Snowflake user.

Explanation

Options A and D are correct. Pre-signed URLs are designed to grant access to files in a stage without granting direct Snowflake user privileges. Option A accurately describes the process for internal stages. Option D highlights the correct function and the necessary permissions. Option B is incorrect because pre-signed URLs are primarily used with Minternal stages to avoid needing access to the underlying cloud storage account. Option C is partially correct, but it grants broader access than intended. Option E defeats the purpose of using pre-signed URLs for time-limited, specific file access.

No community discussion yet for this question.