Get The Important Preparation Guide With ADA-C02 Dumps
Get Totally Free Updates on ADA-C02 Dumps PDF Questions
NEW QUESTION # 20
For Snowflake network policies, what will occur when the account level and user level network policies are both defined?
- A. The user_level network policies will not be supported.
- B. A network policy error will be generated with no definitions provided.
- C. The account_level policy will override the user_level policy.
- D. The user_level policy will override the account_level policy.
Answer: D
Explanation:
When both account-level and user-level network policies are defined in Snowflake, the user-level policy overrides the account-level policy for that specific user.
NEW QUESTION # 21
What SCIM integration types are supported in Snowflake? (Choose three.)
- A. Amazon Web Services (AWS)
- B. Google Cloud Platform (GCP)
- C. Okta
- D. Duo Security Provisioning Connector
- E. Azure Active Directory (Azure AD)
- F. Custom
Answer: C,E,F
Explanation:
Snowflake supports SCIM integrations with Okta, Azure Active Directory (Azure AD), and custom SCIM integrations. These allow automated provisioning and de-provisioning of users and roles. SCIM is not provided directly through AWS, GCP, or Duo.
NEW QUESTION # 22
Which tasks can be performed by the ORGADMIN role? (Choose three.)
- A. View a list of all regions enabled for the organization.
- B. Create secure views on application tables within the organization.
- C. View usage information for all accounts in the organization.
- D. Create one or more accounts in the organization.
- E. Perform zero-copy cloning on account data.
- F. Create a reader account to share data with another organization.
Answer: A,C,D
Explanation:
The ORGADMIN role can create accounts in the organization, view all enabled regions, and access usage information across all organization accounts. Creating secure views and zero-copy cloning are not ORGADMIN tasks. Reader accounts can be created, but only for sharing within the same organization, not with another organization.
NEW QUESTION # 23
What is a characteristic of Snowflake's transaction locking and concurrency modeling?
- A. Transaction locking in Snowflake is enforced exclusively at the row and table levels.
- B. A deadlock cannot occur in Snowflake, since concurrently executed queries and DML statements do not block one another.
- C. If two queries are concurrently executed against the same table, one of the two queries will be blocked until the other query completes.
- D. Queries executed within a given transaction see that transaction's uncommitted changes.
Answer: B
Explanation:
Snowflake uses multi-version concurrency control (MVCC), which allows queries and DML statements to operate without blocking each other. This architecture eliminates the possibility of deadlocks because transactions work on snapshots of data rather than locking rows or tables in ways that could cause contention.
NEW QUESTION # 24
A virtual warehouse report_wh is configured with AUTO_RESUME=TRUE and AUTO_SUSPEND=300. A user has been granted the role accountant.
An application with the accountant role should use this warehouse to run financial reports, and should keep track of compute credits used by the warehouse.
What minimal privileges on the warehouse should be granted to the role to meet the requirements for the application? (Choose two.)
- A. MONITOR
- B. OWNERSHIP
- C. USAGE
- D. MODIFY
- E. OPERATE
Answer: A,C
Explanation:
USAGE privilege is required to run queries on the warehouse.
MONITOR privilege allows tracking and viewing compute credit usage for the warehouse.
NEW QUESTION # 25
A retailer uses a TRANSACTIONS table (100M rows, 1.2 TB) that has been clustered by the STORE_ID column (varchar(50)). The vast majority of analyses on this table are grouped by STORE_ID to look at store performance.
There are 1000 stores operated by the retailer but most sales come from only 20 stores. The Administrator notes that most queries are currently experiencing poor pruning, with large amounts of bytes processed by even simple queries.
Why is this occurring?
- A. The cardinality of the stores to transaction count ratio is too low to use the STORE_ID as a clustering key.
- B. The STORE_ID should be numeric.
- C. Sales across stores are not uniformly distributed.
- D. The table is not big enough to take advantage of the clustering key.
Answer: C
Explanation:
Clustering is effective when data distribution across the clustering key is relatively uniform. In this case, most transactions are concentrated in only 20 of the 1000 stores, leading to skewed data distribution. This imbalance causes poor pruning, since large portions of micro-partitions still need to be scanned, even for queries targeting specific stores.
NEW QUESTION # 26
An Administrator needs to configure a virtual warehouse in Snowflake for a new use case with these details:
1. There will be 50-100 concurrent users running reports
2. Minimize costs based on the number of active users at a given time
3. The virtual warehouse should suspend and resume automatically based on user activity
Which configuration will meet these requirements?
- A. create or replace warehouse reporting_wh
warehouse_size = medium
max_cluster_count = 10
scaling_policy = standard
auto_suspend = 600
auto_resume = true; - B. create or replace warehouse reporting_wh
warehouse_size = xxxlarge
auto_suspend = 60
auto_resume = true; - C. create or replace warehouse reporting_wh
warehouse_size = xxxlarge
max_cluster_count = 10
scaling_policy = standard
auto_suspend = 600
auto_resume = false; - D. create or replace warehouse reporting_wh
warehouse_size = medium
auto_suspend = 600
auto_resume = true;
Answer: A
Explanation:
Supporting 50-100 concurrent users requires a multi-cluster warehouse so compute resources can scale to handle high concurrency. Setting a maximum cluster count allows Snowflake to automatically add clusters when query demand increases and reduce them when demand drops, which helps minimize cost based on active users. Enabling auto_suspend and auto_resume ensures the warehouse automatically stops when idle and restarts when queries arrive, further optimizing cost and operational efficiency.
NEW QUESTION # 27
In general, the monthly billing for database replication is proportional to which variables? (Choose two.)
- A. The number of times data moves across regions and/or cloud service providers between the primary and secondary database accounts
- B. The frequency of the secondary database refreshes from the primary database
- C. The amount of table data in the primary database that changes as a result of data loading or DML operations
- D. The number and size of warehouses defined in the primary account
- E. The frequency of changes to the primary database as a result of data loading or DML operations
Answer: B,C
Explanation:
Replication billing is proportional to the amount of table data in the primary database that changes and needs to be replicated.
The frequency of secondary database refreshes determines how often changed data is transferred, directly impacting replication costs.
NEW QUESTION # 28
What are characteristics of Dynamic Data Masking? (Choose two.)
- A. The role that creates the masking policy will always see unmasked data in query results.
- B. A masking policy that is currently set on a table can be dropped.
- C. A single masking policy can be applied to columns in different tables.
- D. A masking policy can be applied to the VALUE column of an external table.
- E. A single masking policy can be applied to columns with different data types.
Answer: B,C
Explanation:
A masking policy applied to a table or column can be dropped or replaced as needed.
The same masking policy can be reused and applied to columns in different tables.
NEW QUESTION # 29
What roles can be used to create network policies within Snowflake accounts? (Choose three.)
- A. Any role that owns the database where the network policy is created
- B. ACCOUNTADMIN
- C. SECURITYADMIN
- D. Any role with the global permission of CREATE NETWORK POLICY
- E. ORGADMIN
- F. SYSADMIN
Answer: B,C,E
Explanation:
SECURITYADMIN, ACCOUNTADMIN, and ORGADMIN roles can create network policies in Snowflake accounts. These roles have the necessary privileges to manage account-level security policies.
NEW QUESTION # 30
A user with the proper role issues the following commands when setting up and activating network policies:
CREATE OR REPLACE NETWORK POLICY foo_policy
ALLOWED_IP_LIST = ('1.1.1.0/24', '2.2.2.0/24', '3.3.3.0/24')
BLOCKED_IP_LIST = ('1.1.1.1')
COMMENT = 'Account level policy';
ALTER ACCOUNT SET NETWORK_POLICY=foo_policy;
CREATE OR REPLACE NETWORK POLICY bar_policy
ALLOWED_IP_LIST = ('3.3.3.0/24')
BLOCKED_IP_LIST = ('3.3.3.10')
COMMENT = 'user level policy';
ALTER USER user1 SET NETWORK_POLICY=BAR_POLICY;
Afterwards, user1 attempts to log in to Snowflake from IP address 3.3.3.10.
Will the login be successful?
- A. No, because 3.3.3.10 is found in the BLOCKED_IP_LIST of bar_policy.
- B. Yes, because 3.3.3.10 is found in the ALLOWED_IP_LIST of foo_policy.
- C. No, because 3.3.3.10 is not found in the ALLOWED_IP_LIST of foo_policy.
- D. Yes, because 3.3.3.10 is found in the ALLOWED_IP_LIST of bar_policy.
Answer: A
Explanation:
Although 3.3.3.10 is in the ALLOWED_IP_LIST, it is also explicitly listed in the BLOCKED_IP_LIST of the user-level policy (bar_policy). Blocked IPs always take precedence over allowed IPs in Snowflake network policies, so the login attempt will fail.
NEW QUESTION # 31
Which statement allows a Snowflake Administrator to retrieve the network policy applied to their Snowflake account?
- A. DESC NETWORK POLICY <policy_name>;
- B. SHOW PARAMETERS LIKE ‘NETWORK POLICY’ IN ACCOUNT;
- C. SHOW NETWORK POLICIES IN ACCOUNT;
- D. SHOW NETWORK POLICIES;
Answer: B
Explanation:
The network policy applied at the account level is stored as an account parameter. Using a SHOW PARAMETERS command with the filter for NETWORK POLICY at the account scope returns the currently configured value, which identifies the network policy associated with the account.
NEW QUESTION # 32
What access control policy will be put into place when future grants are assigned to both database and schema objects?
- A. An access policy combining both the database object and the schema object will be used, with the most permissive policy taking precedence.
- B. Schema privileges will take precedence over database privileges.
- C. An access policy combining both the database object and the schema object will be used, with the most restrictive policy taking precedence.
- D. Database, privileges will take precedence over schema privileges.
Answer: B
Explanation:
When future grants are set at both the database and schema levels, schema-level future grants take precedence over database-level grants for objects created within that schema.
NEW QUESTION # 33
An Administrator receives data from a Snowflake partner. The partner is sharing a dataset that contains multiple secure views. The Administrator would like to configure the data so that only certain roles can see certain secure views.
How can this be accomplished?
- A. Individually grant imported privileges onto the schema in the share.
- B. Clone the data and insert it into a company-owned share and apply the desired RBAC on the new tables.
- C. Create views over the incoming shared database and apply the desired RBAC onto these views.
- D. Apply RBAC directly onto the partner's shared secure views.
Answer: C
Explanation:
Permissions cannot be applied directly to objects in a shared database. To enforce role-based access, the Administrator must create views over the shared secure views in a local database and then apply RBAC privileges to those new views. This allows controlling which roles can see which data.
NEW QUESTION # 34
Which commands can be performed by a user with the ORGADMIN role but not the ACCOUNTADMIN role? (Choose two.)
- A. SELECT SYSTEM$GLOBAL_ACCOUNT_SET_PARAMETER('ACCOUNT_LOCATOR','ENABLE_ACCOUNT_DATABASE_REPLICATION','true');
- B. SHOW REGIONS;
- C. SHOW ORGANIZATION ACCOUNTS;
- D. SHOW USERS;
- E. GRANT ROLE ORGADMIN TO USER <username>;
Answer: B,C
Explanation:
Only the ORGADMIN role can run SHOW REGIONS and SHOW ORGANIZATION ACCOUNTS, which provide organization-wide information. These commands are not available to the ACCOUNTADMIN role.
NEW QUESTION # 35
Which type of listing in the Snowflake Marketplace can be added and queried immediately?
- A. Standard listing
- B. Personalized listing
- C. Monetized listing
- D. Regional listing
Answer: A
Explanation:
A standard listing in the Snowflake Marketplace can be immediately added to an account and queried without requiring provider approval or additional setup.
NEW QUESTION # 36
Which function is the role SECURITYADMIN responsible for that is not granted to role USERADMIN?
- A. Manage system grants
- B. Create new users
- C. Create new roles
- D. Reset a Snowflake user's password
Answer: A
Explanation:
The SECURITYADMIN role is responsible for managing system grants, such as granting or revoking privileges on roles, which is not permitted for the USERADMIN role.
NEW QUESTION # 37
A team is provisioning new lower environments from the production database using cloning. All production objects and references reside in the database, and do not have external references.
What set of object references needs to be re-pointed before granting access for usage?
- A. There are no object references that need to be re-pointed
- B. Sequences, views, and secure views
- C. Sequences, storage integrations, views, secure views, and materialized views
- D. Sequences, views, secure views, and materialized views
Answer: A
Explanation:
When cloning a database in Snowflake, all objects - including sequences, views, secure views, and materialized views - are fully contained within the cloned database. Since there are no external references, no object references need to be re-pointed before granting access.
NEW QUESTION # 38
......
Prepare With Top Rated High-quality ADA-C02 Dumps For Success in Exam: https://simplilearn.lead1pass.com/Snowflake/ADA-C02-practice-exam-dumps.html