nerdexam
SnowflakeSnowflake

SOL-C01 · Question #38

SOL-C01 Question #38: Real Exam Question with Answer & Explanation

The correct answer is C: Option C. Option C is the most efficient. Granting USAGE on the databases is necessary. Granting USAGE on ALL SCHEMAS allows access to existing schemas. 'GRANT SELECT ON FUTURE TABLES IN SCHEMA' is more efficient than granting SELECT on all existing tables and ensures that the role automat

Snowflake Account and Security

Question

A data science team needs to access data from several databases and schemas for model training. To simplify access management, you create a custom role, `DATA SCIENCE ROLE. You need to grant this role the ability to SELECT from all tables in any schema across the following databases: `DB ANALYTICS, 'DB REPORTING'. Which of the following is the MOST efficient approach, minimizing the number of GRANT statements while adhering to least privilege?

Options

  • AOption A
  • BOption B
  • COption C
  • DOption D
  • EOption E

Explanation

Option C is the most efficient. Granting USAGE on the databases is necessary. Granting USAGE on ALL SCHEMAS allows access to existing schemas. 'GRANT SELECT ON FUTURE TABLES IN SCHEMA' is more efficient than granting SELECT on all existing tables and ensures that the role automatically has access to any newly created tables within those schemas.Option A Grants select on ALL tables, but doesn't include future tables. Option B Grants select on ALL tables, but doesn't include future tables and also does not grant USAGE on the SCHEMAS directly. option D Grants select on FUTURE TABLES for the database directly, which is not possible.

Topics

#Role-based Access Control#GRANT statements#Future Grants#Least Privilege
Full SOL-C01 PracticeBrowse All SOL-C01 Questions