nerdexam
SnowflakeSnowflake

SOL-C01 · Question #275

SOL-C01 Question #275: Real Exam Question with Answer & Explanation

The correct answer is E: Revoke the DELETE privilege ONLY on the specific critical table.. Revoking the DELETE privilege ONLY on the specific critical table prevents accidental deletion of that table while still allowing the analyst to delete data from other tables where they have the appropriate permissions. Revoking DELETE on all tables or removing ACCOUNTADMIN is to

Snowflake Account and Security

Question

A junior data analyst accidentally deleted a critical table using Snowsight. After restoring the table from Time Travel, they want to prevent this from happening again. What is the MOST appropriate preventative measure they should take using Snowsight, considering they still need access to query other tables?

Options

  • ARevoke the DELETE privilege on all tables for the analyst.
  • BConfigure multi-factor authentication for the analyst's Snowflake account.
  • CRevoke the ACCOUNTADMIN role from the analyst.
  • DGrant the analyst the MONITOR privilege on the database.
  • ERevoke the DELETE privilege ONLY on the specific critical table.

Explanation

Revoking the DELETE privilege ONLY on the specific critical table prevents accidental deletion of that table while still allowing the analyst to delete data from other tables where they have the appropriate permissions. Revoking DELETE on all tables or removing ACCOUNTADMIN is too restrictive, as the analyst needs to query and potentially modify other tables. Multi-factor authentication enhances security but doesn't directly prevent accidental deletions. MONITOR privilege is for observing, not preventing actions.

Topics

#Privilege Management#Access Control#Data Security#RBAC

Community Discussion

No community discussion yet for this question.

Full SOL-C01 PracticeBrowse All SOL-C01 Questions