SnowPro Advanced Administrator ADA-C02

By Snowflake · Question Mode

QuestionQ19

Manage and administer Snowflake accounts, data security, and governance

An Administrator has been asked to support the company’s application team, which needs to build a loyalty program for its customers. The customer table contains Personally Identifiable Information (PII), and the application team has the DEVELOPER role.

CREATE TABLE customer_data (  
  customer_first_name string,  
  customer_last_name string,  
  customer_address string,  
  customer_email string,  
  ... some other columns,  
);

The application team needs access to the customer data, but the email field must be obfuscated. How can the Administrator safeguard the sensitive information while retaining the data’s usability?

Explanation

A Snowflake dynamic masking policy can be attached to sensitive columns such as customer_email and use CURRENT_ROLE() to return an obfuscated value to the DEVELOPER role while allowing authorized roles to see the original value. This preserves access to the complete table and protects the PII at query time.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!