SOL-C01 Question #30: Real Exam Question with Answer & Explanation

Question

A security architect is designing a role hierarchy in Snowflake for a data analytics team. They need to grant specific privileges to different user groups. 'DATA ENGINEER' role should have the ability to create and manage databases. 'DATA ANALYST' role should be able to query data from those databases. 'REPORT USER' role needs read-only access to specific views. The architect wants to ensure minimum privilege and enforce role separation. Which of the following sequences of SQL commands would correctly establish this role hierarchy and grant necessary privileges?

Options

• AOption A
• BOption B
• COption C
• DOption D
• EOption E

Explanation

Option E is the most complete answer. It creates the roles, grants necessary database creation privileges to DATA_ENGINEER, allows DATA ANALYST to use and query the database, and REPORT USER to use the database and select from the specified view. The role grants establish the hierarchy. Options A and B have incorrect grant statements for select on all tables in the database and lack the creation of Roles at the begining. Option D does not grant the roles to each other, leaving the hierarchy incomplete, and incorrectly attempts to grant select on future tables directly to a view.

No community discussion yet for this question.