Snowflake Updated COF-C02 Exam Questions and Answers by ayyub

Masking policies in Snowflake are designed to protect sensitive information by dynamically hiding or obfuscating data based on the role of the user executing the query. This helps enforce data privacy and security by allowing only authorized users to see sensitive information. Masking policies do not encrypt data but apply rules to limit data visibility, ensuring sensitive data is protected during query execution without altering the underlying data.

Clustering keys improve query performance by organizing data to optimize retrieval for frequently queried columns.

For high-cardinality columns like a 15-digit ID, Snowflake recommends bucketing or truncating the column values to reduce cardinality.

The function TRUNC(ID_NUMBER, -6) truncates the ID number by dropping the last 6 digits, reducing the number of unique values while maintaining relevance for clustering.

Key Steps:

Use TRUNC to reduce high-cardinality column values for efficient clustering.

Monitor clustering key performance via clustering depth metrics.

References:

Snowflake Documentation: Clustering Keys

Snowflake Best Practices for Clustering

To restore a dropped table in Snowflake, you need specific privileges:

Ownership (B): The owner of the table can perform all operations, including restoring dropped tables.

All privileges on the database (D): Having full database privileges includes access to restore dropped objects within that database.

Why Other Options Are Incorrect:

A. Select privilege: Only allows querying data, not restoration.

C. All privileges on the table: The table no longer exists, so this does not apply.

E. Create table privilege: This allows creating new tables, not restoring dropped ones.

References:

Undrop Table

Snowflake Privileges Documentation

Network policies in Snowflake are used to control access to Snowflake accounts based on IP address ranges. These policies can be activated by specific roles that have the necessary privileges.

Role: ACCOUNTADMIN:

The ACCOUNTADMIN role has full administrative rights across the Snowflake account.

This role can manage all aspects of the Snowflake environment, including network policies.

Role with Global ATTACH POLICY Privilege:

Any role that has been granted the global ATTACH POLICY privilege can activate network policies.

This privilege allows the role to attach policies that control network access to the account.

References:

Snowflake Documentation: Network Policies