SOL-C01 Question #48: Real Exam Question with Answer & Explanation

Question

You need to implement a data governance strategy that ensures data stewards can only access specific columns within a table to perform data quality checks. The table is `RAW DATA.PUBLIC.CUSTOMER DETAILS' and you want to allow the data stewards to only see the 'CUSTOMER ID', `EMAIL', and 'PHONE NUMBER columns. Which is the most efficient and secure method to grant access?

Options

• AGrant SELECT privilege on the table to a custom role used by the data stewards. Use masking
• BCreate a secure view that only includes the `EMAIL ` , and 'PHONE_NUMBER columns. Grant
• CGrant SELECT privilege on the table to the 'PUBLIC' role. Revoke SELECT privilege on the
• DCreate a role hierarchy where a data steward role inherits from a higher-level role that has
• ECreate a standard view that only includes the 'CUSTOMER ID', 'EMAIL', and 'PHONE NUMBER

Explanation

Option B is the most secure and efficient. Secure views provide enhanced security compared to regular views, preventing potential information leakage through side-channel attacks. Secure views guarantee that data stewards only have access to the specified columns, enforcing the principle of least privilege. Masking policies (Option A) can introduce performance overhead. Granting access to the 'PUBLIC' role (Option C) is generally not recommended for security reasons. Role hierarchy by inheriting privileges on the entire table breaks down security, as the user could switch to the parent role.

No community discussion yet for this question.