SOL-C01 Question #53: Real Exam Question with Answer & Explanation

Question

A Snowflake administrator needs to audit all grants and revocations performed on a specific table named 'EMPLOYEES' within the DATABASE. They want to capture the timestamp, grantor, grantee, and the privilege being granted or revoked. Which combination of INFORMATION SCHEMA views and columns provides the MOST comprehensive and accurate information for this audit?

Options

• A(PRIVILEGE, GRANTEE, GRANTOR), and TABLE_PRIVILEGES (TABLE_NAME, PRIVILEGE)
• BOBJECT GRANTS (PRIVILEGE, GRANTEE NAME, GRANTOR NAME, GRANTED ON, NAME)
• C(PRIVILEGE, GRANTEE, GRANTOR), and USAGE_PRIVILEGES (OBJECT_NAME, PRIVILEGE)
• DACCOUNT_USAGE.GRANTS HISTORY (PRIVILEGE, GRANTEE_NAME, GRANTOR NAME,
• EQUERY HISTORY and filter for GRANT and REVOKE commands

Explanation

'ACCOUNT USAGE.GRANTS HISTORY is the BEST view for auditing grants and revocations. It contains information about the privilege, grantee, grantor, the object on which the privilege was granted, and crucially, the timestamp ('GRANTED_ON'). While other views like 'OBJECT GRANTS' might provide some information, 'GRANTS_HISTORY is specifically designed for auditing purposes and provides the most complete historical record. Parsing QUERY _ HISTORY for GRANT/REVOKE is unreliable due to potential query variations and doesn't guarantee complete capturing of all events. Options A, B, and C lack the comprehensive information found in `GRANTS_HISTORY.

No community discussion yet for this question.