nerdexam
SnowflakeSnowflake

SOL-C01 · Question #56

SOL-C01 Question #56: Real Exam Question with Answer & Explanation

The correct answer is C: No change is required, as 'INSERT privilege alone does not grant access to view existing data.. The INSERT privilege, by itself, only allows a user to insert data into a table. It does not grant the ability to see existing data via SELECT. If the user only has the INSERT privilege, no action is required. If the user had other privileges, it could have allowed them to see da

Snowflake Account and Security

Question

A user named 'DATA LOADER is responsible for loading data into a table named 'ORDERS' in the 'PUBLIC' schema of the 'SALES DB' database. Initially, 'DATA LOADER had the 'INSERT' privilege on the 'ORDERS' table. However, after a recent security audit, it was determined that 'DATA LOADER should only have the ability to insert data without being able to see existing data in the table. What is the MOST appropriate action to take?

Options

  • ARevoke the 'SELECT privilege from 'DATA_LOADER on the 'ORDERS' table.
  • BRevoke the 'INSERT privilege from and grant the ` APPLY MASKING POLICY privilege instead.
  • CNo change is required, as 'INSERT privilege alone does not grant access to view existing data.
  • DCreate a view on the "ORDERS' table that excludes all columns, grant 'SELECT on the view to
  • ERevoke the 'INSERT privilege from 'DATA LOADER and grant the 'WRITE privilege instead.

Explanation

The INSERT privilege, by itself, only allows a user to insert data into a table. It does not grant the ability to see existing data via SELECT. If the user only has the INSERT privilege, no action is required. If the user had other privileges, it could have allowed them to see data.

Topics

#Snowflake Privileges#INSERT Privilege#Access Control#Data Security

Community Discussion

No community discussion yet for this question.

Full SOL-C01 PracticeBrowse All SOL-C01 Questions