ARA-C01 Free Practice Test

In a managed access schema, what are characteristics of the roles that can manage object privileges? (Select TWO).

1. A. Users with the SYSADMIN role can grant object privileges in a managed access schema.
2. B. Users with the SECURITYADMIN role or higher, can grant object privileges in a managed access schema.
3. C. Users who are database owners can grant object privileges in a managed access schema.
4. D. Users who are schema owners can grant object privileges in a managed access schema.
5. E. Users who are object owners can grant object privileges in a managed access schema.

Correct Answer: BD
In a managed access schema, the privilege management is centralized with the schema owner, who has the authority to grant object privileges within the schema. Additionally, the SECURITYADMIN role has the capability to manage object grants
globally, which includes within managed access schemas. Other roles, such as SYSADMIN or database owners, do not inherently have this privilege unless explicitly granted. References: The verified answers are based on Snowflake??s official documentation, which outlines the roles and privileges associated with managed access schemas12.

A global company needs to securely share its sales and Inventory data with a vendor using a Snowflake account.
The company has its Snowflake account In the AWS eu-west 2 Europe (London) region. The vendor's Snowflake account Is on the Azure platform in the West Europe region. How should the company's Architect configure the data share?

1. A. * 1. Create a share.* 2. Add objects to the share.* 3. Add a consumer account to the share for the vendor to access.
2. B. * 1. Create a share.* 2. Create a reader account for the vendor to use.* 3. Add the reader account to the share.
3. C. * 1. Create a new role called db_share.* 2. Grant the db_share role privileges to read data from the company database and schema.* 3. Create a user for the vendor.* 4. Grant the ds_share role to the vendor's users.
4. D. * 1. Promote an existing database in the company's local account to primary.* 2. Replicate the database to Snowflake on Azure in the West-Europe region.* 3. Create a share and add objects to the share.* 4. Add a consumer account to the share for the vendor to access.

Correct Answer: A
The correct way to securely share data with a vendor using a Snowflake account on a different cloud platform and region is to create a share, add objects to the share, and add a consumer account to the share for the vendor to access. This way, the company can control what data is shared, who can access it, and how long the share is valid. The vendor can then query the shared data without copying or moving it to their own account. The other options are either incorrect or inefficient, as they involve creating unnecessary reader accounts, users, roles, or database replication. https://learn.snowflake.com/en/certifications/snowpro-advanced-architect/

An Architect is integrating an application that needs to read and write data to Snowflake without installing any additional software on the application server.
How can this requirement be met?

1. A. Use SnowSQL.
2. B. Use the Snowpipe REST API.
3. C. Use the Snowflake SQL REST API.
4. D. Use the Snowflake ODBC driver.

Correct Answer: C
The Snowflake SQL REST API is a REST API that you can use to access and update data in a Snowflake database. You can use this API to execute standard queries and most DDL and DML statements. This API can be used to develop custom applications and integrations that can read and write data to Snowflake without installing any additional software on the application server. Option A is not correct because SnowSQL is a command-line client that requires installation and configuration on the application server. Option B is not correct because the Snowpipe REST API is used to load data from cloud storage into Snowflake tables, not to read or write data to Snowflake. Option D is not correct because the Snowflake ODBC driver is a software component that enables applications to connect to Snowflake using the ODBC protocol, which also requires installation and configuration on the application server. References: The answer can be verified from Snowflake??s official documentation on the Snowflake SQL REST API available on their website. Here are some relevant links:
✑ Snowflake SQL REST API | Snowflake Documentation
✑ Introduction to the SQL API | Snowflake Documentation
✑ Submitting a Request to Execute SQL Statements | Snowflake Documentation

A company has built a data pipeline using Snowpipe to ingest files from an Amazon S3 bucket. Snowpipe is configured to load data into staging database tables. Then a task runs to load the data from the staging database tables into the reporting database tables.
The company is satisfied with the availability of the data in the reporting database tables,
but the reporting tables are not pruning effectively. Currently, a size 4X-Large virtual warehouse is being used to query all of the tables in the reporting database.
What step can be taken to improve the pruning of the reporting tables?

1. A. Eliminate the use of Snowpipe and load the files into internal stages using PUT commands.
2. B. Increase the size of the virtual warehouse to a size 5X-Large.
3. C. Use an ORDER BY command to load the reporting tables.
4. D. Create larger files for Snowpipe to ingest and ensure the staging frequency does not exceed 1 minute.

Correct Answer: C
Effective pruning in Snowflake relies on the organization of data within micro- partitions. By using an ORDER BY clause with clustering keys when loading data into the reporting tables, Snowflake can better organize the data within micro-partitions. This organization allows Snowflake to skip over irrelevant micro-partitions during a query, thus improving query performance and reducing the amount of data scanned12.
References =
•Snowflake Documentation on micro-partitions and data clustering2
•Community article on recognizing unsatisfactory pruning and improving it1

An Architect entered the following commands in sequence:

USER1 cannot find the table.
Which of the following commands does the Architect need to run for USER1 to find the tables using the Principle of Least Privilege? (Choose two.)

1. A. GRANT ROLE PUBLIC TO ROLE INTERN;
2. B. GRANT USAGE ON DATABASE SANDBOX TO ROLE INTERN;
3. C. GRANT USAGE ON SCHEMA SANDBOX.PUBLIC TO ROLE INTERN;
4. D. GRANT OWNERSHIP ON DATABASE SANDBOX TO USER INTERN;
5. E. GRANT ALL PRIVILEGES ON DATABASE SANDBOX TO ROLE INTERN;

Correct Answer: BC
✑ According to the Principle of Least Privilege, the Architect should grant the minimum privileges necessary for the USER1 to find the tables in the SANDBOX database.
✑ The USER1 needs to have USAGE privilege on the SANDBOX database and the SANDBOX.PUBLIC schema to be able to access the tables in the PUBLIC schema. Therefore, the commands B and C are the correct ones to run.
✑ The command A is not correct because the PUBLIC role is automatically granted to every user and role in the account, and it does not have any privileges on the SANDBOX database by default.
✑ The command D is not correct because it would transfer the ownership of the SANDBOX database from the Architect to the USER1, which is not necessary and violates the Principle of Least Privilege.
✑ The command E is not correct because it would grant all the possible privileges on the SANDBOX database to the USER1, which is also not necessary and violates the Principle of Least Privilege.
References: : Snowflake - Principle of Least Privilege : Snowflake - Access Control Privileges : Snowflake - Public Role : Snowflake - Ownership and Grants