Free 2026 ARA-C01 Dumps 100 Pass Guarantee With Latest Demo
Prepare ARA-C01 Question Answers Free Update With 100% Exam Passing Guarantee [2026]
Snowflake ARA-C01 certification exam is a highly valued credential in the data industry. It is designed to test a candidate's advanced architectural knowledge of Snowflake's cloud data platform. Passing the exam is a significant achievement for any data professional looking to advance their career in the field. SnowPro Advanced Architect Certification certification demonstrates that you have a deep understanding of Snowflake's architecture, data modeling, performance tuning, security, and data integration, making you a valuable asset to any organization.
NEW QUESTION # 34
A company wants to deploy its Snowflake accounts inside its corporate network with no visibility on the internet. The company is using a VPN infrastructure and Virtual Desktop Infrastructure (VDI) for its Snowflake users. The company also wants to re-use the login credentials set up for the VDI to eliminate redundancy when managing logins.
What Snowflake functionality should be used to meet these requirements? (Choose two.)
- A. Use a proxy Snowflake account outside the VPN, enabling client redirect for user logins.
- B. Set up replication to allow users to connect from outside the company VPN.
- C. Use private connectivity from a cloud provider.
- D. Provision a unique company Tri-Secret Secure key.
- E. Set up SSO for federated authentication.
Answer: C,E
Explanation:
According to the SnowPro Advanced: Architect documents and learning resources, the Snowflake functionality that should be used to meet these requirements are:
* Use private connectivity from a cloud provider. This feature allows customers to connect to Snowflake from their own private network without exposing their data to the public Internet. Snowflake integrates with AWS PrivateLink, Azure Private Link, and Google Cloud Private Service Connect to offer private connectivity from customers' VPCs or VNets to Snowflake endpoints. Customers can control how traffic reaches the Snowflake endpoint and avoid the need for proxies or public IP addresses123.
* Set up SSO for federated authentication. This feature allows customers to use their existing identity provider (IdP) to authenticate users for SSO access to Snowflake. Snowflake supports most SAML 2.0- compliant vendors as an IdP, including Okta, Microsoft AD FS, Google G Suite, Microsoft Azure Active Directory, OneLogin, Ping Identity, and PingOne. By setting up SSO for federated authentication, customers can leverage their existing user credentials and profile information, and provide stronger security than username/password authentication4.
The other options are incorrect because they do not meet the requirements or are not feasible. Option A is incorrect because setting up replication does not allow users to connect from outside the company VPN.
Replication is a feature of Snowflake that enables copying databases across accounts in different regions and cloud platforms. Replication does not affect the connectivity or visibility of the accounts5. Option B is incorrect because provisioning a unique company Tri-Secret Secure key does not affect the network or authentication requirements. Tri-Secret Secure is a feature of Snowflake that allows customers to manage their own encryption keys for data at rest in Snowflake, using a combination of three secrets: a master key, a service key, and a security password. Tri-Secret Secure provides an additional layer of security and control over the data encryption and decryption process, but it does not enable private connectivity or SSO6. Option E is incorrect because using a proxy Snowflake account outside the VPN, enabling client redirect for user logins, is not a supported or recommended way of meeting the requirements. Client redirect is a feature of Snowflake that allows customers to connect to a different Snowflake account than the one specified in the connection string. This feature is useful for scenarios such as cross-region failover, data sharing, and account migration, but it does not provide private connectivity or SSO7. References: AWS PrivateLink & Snowflake | Snowflake Documentation, Azure Private Link & Snowflake | Snowflake Documentation, Google Cloud Private Service Connect & Snowflake | Snowflake Documentation, Overview of Federated Authentication and SSO | Snowflake Documentation, Replicating Databases Across Multiple Accounts | Snowflake Documentation, Tri-Secret Secure | Snowflake Documentation, Redirecting Client Connections | Snowflake Documentation
NEW QUESTION # 35
You have a very large table which is already clustered on columns that are used to retrieve data from the table by a business group. The base table data does not change much. Another business group came to you and requested for a relatively small subset of data from the table which they will query using complex aggregation logic. You know that querying with those columns will take a lot of time because the table is not clustered on those columns.
What is the most optimal solution that you will suggest to the business team?
- A. CREATE A MATERIALIZED VIEW AND CLUSTER THE VIEW ON THOSE COLUMNS
- B. CREATE A SECURE VIEW
- C. CREATE A REGULAR VIEW
Answer: A
NEW QUESTION # 36
A company needs to have the following features available in its Snowflake account:
1. Support for Multi-Factor Authentication (MFA)
2. A minimum of 2 months of Time Travel availability
3. Database replication in between different regions
4. Native support for JDBC and ODBC
5. Customer-managed encryption keys using Tri-Secret Secure
6. Support for Payment Card Industry Data Security Standards (PCI DSS)
In order to provide all the listed services, what is the MINIMUM Snowflake edition that should be selected during account creation?
- A. Enterprise
- B. Virtual Private Snowflake (VPS)
- C. Standard
- D. Business Critical
Answer: D
Explanation:
According to the Snowflake documentation1, the Business Critical edition offers the following features that are relevant to the question:
Support for Multi-Factor Authentication (MFA): This is a standard feature available in all Snowflake editions1.
A minimum of 2 months of Time Travel availability: This is an enterprise feature that allows users to access historical data for up to 90 days1.
Database replication in between different regions: This is an enterprise feature that enables users to replicate databases across different regions or cloud platforms1.
Native support for JDBC and ODBC: This is a standard feature available in all Snowflake editions1.
Customer-managed encryption keys using Tri-Secret Secure: This is a business critical feature that provides enhanced security and data protection by allowing customers to manage their own encryption keys1.
Support for Payment Card Industry Data Security Standards (PCI DSS): This is a business critical feature that ensures compliance with PCI DSS regulations for handling sensitive cardholder data1.
Therefore, the minimum Snowflake edition that should be selected during account creation to provide all the listed services is the Business Critical edition.
Reference:
Snowflake Editions | Snowflake Documentation
NEW QUESTION # 37
You have a large warehouse with auto suspend configured for 10 minutes. You submitted a query and it is going to run for more than 10 minutes.
What will happen to the query?
- A. The query will automatically cancelled after 10 minutes
- B. The query will continue to run
- C. The query will go on a hold state
Answer: B
NEW QUESTION # 38
A company wants to Integrate its main enterprise identity provider with federated authentication with Snowflake.
The authentication integration has been configured and roles have been created in Snowflake. However, the users are not automatically appearing in Snowflake when created and their group membership is not reflected in their assigned rotes.
How can the missing functionality be enabled with the LEAST amount of operational overhead?
- A. SCIM must be enabled between the identity provider and Snowflake. Once both are synchronized through SCIM, their groups will get created as group accounts in Snowflake and the proper roles can be granted.
- B. OAuth must be configured between the identity provider and Snowflake. Then the authorization server must be configured with the right mapping of users and roles.
- C. SCIM must be enabled between the identity provider and Snowflake. Once both are synchronized through SCIM. users will automatically get created and their group membership will be reflected as roles In Snowflake.
- D. OAuth must be configured between the identity provider and Snowflake. Then the authorization server must be configured with the right mapping of users, and the resource server must be configured with the right mapping of role assignment.
Answer: C
Explanation:
The best way to integrate an enterprise identity provider with federated authentication and enable automatic user creation and role assignment in Snowflake is to use SCIM (System for Cross-domain Identity Management). SCIM allows Snowflake to synchronize with the identity provider and create users and groups based on the information provided by the identity provider. The groups are mapped to roles in Snowflake, and the users are assigned the roles based on their group membership. This way, the identity provider remains the source of truth for user and group management, and Snowflake automatically reflects the changes without manual intervention. The other options are either incorrect or incomplete, as they involve using OAuth, which is a protocol for authorization, not authentication or user provisioning, and require additional configuration of authorization and resource servers.
NEW QUESTION # 39
An Architect entered the following commands in sequence:
USER1 cannot find the table.
Which of the following commands does the Architect need to run for USER1 to find the tables using the Principle of Least Privilege? (Choose two.)
- A. GRANT ROLE PUBLIC TO ROLE INTERN;
- B. GRANT USAGE ON SCHEMA SANDBOX.PUBLIC TO ROLE INTERN;
- C. GRANT USAGE ON DATABASE SANDBOX TO ROLE INTERN;
- D. GRANT ALL PRIVILEGES ON DATABASE SANDBOX TO ROLE INTERN;
- E. GRANT OWNERSHIP ON DATABASE SANDBOX TO USER INTERN;
Answer: B,C
NEW QUESTION # 40
An Architect has been asked to clone schema STAGING as it looked one week ago, Tuesday June 1st at 8:00 AM, to recover some objects.
The STAGING schema has 50 days of retention.
The Architect runs the following statement:
CREATE SCHEMA STAGING_CLONE CLONE STAGING at (timestamp => '2021-06-01 08:00:00'); The Architect receives the following error: Time travel data is not available for schema STAGING. The requested time is either beyond the allowed time travel period or before the object creation time.
The Architect then checks the schema history and sees the following:
CREATED_ON|NAME|DROPPED_ON
2021-06-02 23:00:00 | STAGING | NULL
2021-05-01 10:00:00 | STAGING | 2021-06-02 23:00:00
How can cloning the STAGING schema be achieved?
- A. Cloning cannot be accomplished because the STAGING schema version was not active during the proposed Time Travel time period.
- B. Rename the STAGING schema and perform an UNDROP to retrieve the previous STAGING schema version, then run the CLONE statement.
- C. Undrop the STAGING schema and then rerun the CLONE statement.
- D. Modify the statement: CREATE SCHEMA STAGING_CLONE CLONE STAGING at (timestamp =>
'2021-05-01 10:00:00');
Answer: A
Explanation:
The error encountered during the cloning attempt arises because the schema STAGING as it existed on June
1st, 2021, is not within the Time Travel retention period. According to the schema history, STAGING was recreated on June 2nd, 2021, after being dropped on the same day. The requested timestamp of '2021-06-01
08:00:00' is prior to this recreation, hence not available. The STAGING schema from before June 2nd was dropped and exceeded the Time Travel period for retrieval by the time of the cloning attempt. Therefore, cloning STAGING as it looked on June 1st, 2021, cannot be achieved because the data from that time is no longer available within the allowed Time Travel window.References: Snowflake documentation on Time Travel and data cloning, which is covered under the SnowPro Advanced: Architect certification resources.
NEW QUESTION # 41
What integration object should be used to place restrictions on where data may be exported?
- A. Storage integration
- B. API integration
- C. Security integration
- D. Stage integration
Answer: A
Explanation:
In Snowflake, a storage integration is used to define and configure external cloud storage that Snowflake will interact with. This includes specifying security policies for access control. One of the main features of storage integrations is the ability to set restrictions on where data may be exported. This is done by binding the storage integration to specific cloud storage locations, thereby ensuring that Snowflake can only access those locations. It helps to maintain control over the data and complies with data governance and security policies by preventing unauthorized data exports to unspecified locations.
NEW QUESTION # 42
A Snowflake Architect is designing a multiple-account design strategy.
This strategy will be MOST cost-effective with which scenarios? (Select TWO).
- A. The company security policy mandates the use of different Active Directory instances for the development, test, and production environments.
- B. The company wants to clone a production database that resides on AWS to a development database that resides on Azure.
- C. The company must use a specific network policy for certain users to allow and block given IP addresses.
- D. The company needs to share data between two databases, where one must support Payment Card Industry Data Security Standard (PCI DSS) compliance but the other one does not.
- E. The company needs to support different role-based access control features for the development, test, and production environments.
Answer: A,D
Explanation:
B: When dealing with PCI DSS compliance, having separate accounts can be beneficial because it enables strong isolation of environments that handle sensitive data from those that do not. By segregating the compliant from non-compliant resources, an organization can limit the scope of compliance, thus making it a cost-effective strategy.
D: Different Active Directory instances can be managed more effectively and securely when separated into different accounts. This approach allows for distinct identity and access management policies, which can enforce security requirements and minimize the risk of access policy errors between environments.
NEW QUESTION # 43
A DevOps team has a requirement for recovery of staging tables used in a complex set of data pipelines. The staging tables are all located in the same staging schem a. One of the requirements is to have online recovery of data on a rolling 7-day basis.
After setting up the DATA_RETENTION_TIME_IN_DAYS at the database level, certain tables remain unrecoverable past 1 day.
What would cause this to occur? (Choose two.)
- A. The DATA_RETENTION_TIME_IN_DAYS for the staging schema has been set to 1 day.
- B. The DevOps role should be granted ALLOW_RECOVERY privilege on the staging schema.
- C. The tables exceed the 1 TB limit for data recovery.
- D. The staging schema has not been setup for MANAGED ACCESS.
- E. The staging tables are of the TRANSIENT type.
Answer: A,E
NEW QUESTION # 44
What are characteristics of the use of transactions in Snowflake? (Select TWO).
- A. The autocommit setting can be changed inside a stored procedure.
- B. A transaction can be started explicitly by executing a begin transaction statement and end explicitly by executing an end transaction statement.
- C. Explicit transactions should contain only DML statements and query statements. All DDL statements implicitly commit active transactions.
- D. Explicit transactions can contain DDL, DML, and query statements.
- E. A transaction can be started explicitly by executing a begin work statement and end explicitly by executing a commit work statement.
Answer: A,D
NEW QUESTION # 45
There are two databases in an account, named fin_db and hr_db which contain payroll and employee data, respectively. Accountants and Analysts in the company require different permissions on the objects in these databases to perform their jobs. Accountants need read-write access to fin_db but only require read-only access to hr_db because the database is maintained by human resources personnel.
An Architect needs to create a read-only role for certain employees working in the human resources department.
Which permission sets must be granted to this role?
- A. USAGE on database hr_db, USAGE on all schemas in database hr_db, REFERENCES on all tables in database hr_db
- B. USAGE on database hr_db, USAGE on all schemas in database hr_db, SELECT on all tables in database hr_db
- C. USAGE on database hr_db, SELECT on all schemas in database hr_db, SELECT on all tables in database hr_db
- D. MODIFY on database hr_db, USAGE on all schemas in database hr_db, USAGE on all tables in database hr_db
Answer: B
Explanation:
Explanation
* To create a read-only role for certain employees working in the human resources department, the role needs to have the following permissions on the hr_db database:
* USAGE on the database: This allows the role to access the database and see its schemas and objects.
* USAGE on all schemas in the database: This allows the role to access the schemas and see their objects.
* SELECT on all tables in the database: This allows the role to query the data in the tables.
* Option A is the correct answer because it grants the minimum permissions required for a read-only role on the hr_db database.
* Option B is incorrect because SELECT on schemas is not a valid permission. Schemas only support USAGE and CREATE permissions.
* Option C is incorrect because MODIFY on the database is not a valid permission. Databases only support USAGE, CREATE, MONITOR, and OWNERSHIP permissions. Moreover, USAGE on tables is not sufficient for querying the data. Tables support SELECT, INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, and OWNERSHIP permissions.
* Option D is incorrect because REFERENCES on tables is not relevant for querying the data.
REFERENCES permission allows the role to create foreign key constraints on the tables.
References:
* : https://docs.snowflake.com/en/user-guide/security-access-control-privileges.html#database-privileges
* : https://docs.snowflake.com/en/user-guide/security-access-control-privileges.html#schema-privileges
* : https://docs.snowflake.com/en/user-guide/security-access-control-privileges.html#table-privileges
NEW QUESTION # 46
A media company needs a data pipeline that will ingest customer review data into a Snowflake table, and apply some transformations. The company also needs to use Amazon Comprehend to do sentiment analysis and make the de-identified final data set available publicly for advertising companies who use different cloud providers in different regions.
The data pipeline needs to run continuously and efficiently as new records arrive in the object storage leveraging event notifications. Also, the operational complexity, maintenance of the infrastructure, including platform upgrades and security, and the development effort should be minimal.
Which design will meet these requirements?
- A. Ingest the data using copy into and use streams and tasks to orchestrate transformations. Export the data into Amazon S3 to do model inference with Amazon Comprehend and ingest the data back into a Snowflake table. Then create a listing in the Snowflake Marketplace to make the data available to other companies.
- B. Ingest the data using Snowpipe and use streams and tasks to orchestrate transformations. Create an external function to do model inference with Amazon Comprehend and write the final records to a Snowflake table. Then create a listing in the Snowflake Marketplace to make the data available to other companies.
- C. Ingest the data into Snowflake using Amazon EMR and PySpark using the Snowflake Spark connector. Apply transformations using another Spark job. Develop a python program to do model inference by leveraging the Amazon Comprehend text analysis API. Then write the results to a Snowflake table and create a listing in the Snowflake Marketplace to make the data available to other companies.
- D. Ingest the data using Snowpipe and use streams and tasks to orchestrate transformations. Export the data into Amazon S3 to do model inference with Amazon Comprehend and ingest the data back into a Snowflake table. Then create a listing in the Snowflake Marketplace to make the data available to other companies.
Answer: B
NEW QUESTION # 47
An Architect needs to allow a user to create a database from an inbound share.
To meet this requirement, the user's role must have which privileges? (Choose two.)
- A. IMPORT PRIVILEGES;
- B. IMPORT DATABASE;
- C. IMPORT SHARE;
- D. CREATE DATABASE;
- E. CREATE SHARE;
Answer: B,D
Explanation:
According to the Snowflake documentation, to create a database from an inbound share, the user's role must have the following privileges:
* The CREATE DATABASE privilege on the current account. This privilege allows the user to create a new database in the account1.
* The IMPORT DATABASE privilege on the share. This privilege allows the user to import a database from the share into the account2. The other privileges listed are not relevant for this requirement. The IMPORT SHARE privilege is used to import a share into the account, not a database3. The IMPORT PRIVILEGES privilege is used to import the privileges granted on the shared objects, not the objects themselves2. The CREATE SHARE privilege is used to create a share to provide data to other accounts, not to consume data from other accounts4.
References:
* CREATE DATABASE | Snowflake Documentation
* Importing Data from a Share | Snowflake Documentation
* Importing a Share | Snowflake Documentation
* CREATE SHARE | Snowflake Documentation
NEW QUESTION # 48
There are two databases in an account, named fin_db and hr_db which contain payroll and employee data, respectively. Accountants and Analysts in the company require different permissions on the objects in these databases to perform their jobs. Accountants need read-write access to fin_db but only require read-only access to hr_db because the database is maintained by human resources personnel.
An Architect needs to create a read-only role for certain employees working in the human resources department.
Which permission sets must be granted to this role?
- A. USAGE on database hr_db, USAGE on all schemas in database hr_db, REFERENCES on all tables in database hr_db
- B. USAGE on database hr_db, USAGE on all schemas in database hr_db, SELECT on all tables in database hr_db
- C. USAGE on database hr_db, SELECT on all schemas in database hr_db, SELECT on all tables in database hr_db
- D. MODIFY on database hr_db, USAGE on all schemas in database hr_db, USAGE on all tables in database hr_db
Answer: B
NEW QUESTION # 49
How is the change of local time due to daylight savings time handled in Snowflake tasks? (Choose two.)
- A. A frequent task execution schedule like minutes may not cause a problem, but will affect the task history.
- B. A task scheduled in a UTC-based schedule will have no issues with the time changes.
- C. A task schedule will follow only the specified time and will fail to handle lost or duplicated hours.
- D. A task will move to a suspended state during the daylight savings time change.
- E. Task schedules can be designed to follow specified or local time zones to accommodate the time changes.
Answer: B,E
Explanation:
According to the Snowflake documentation1 and the web search results2, these two statements are true about how the change of local time due to daylight savings time is handled in Snowflake tasks. A task is a feature that allows scheduling and executing SQL statements or stored procedures in Snowflake. A task can be scheduled using a cron expression that specifies the frequency and time zone of the task execution.
* A task scheduled in a UTC-based schedule will have no issues with the time changes. UTC is a universal time standard that does not observe daylight savings time. Therefore, a task that uses UTC as the time zone will run at the same time throughout the year, regardless of the local time changes1.
* Task schedules can be designed to follow specified or local time zones to accommodate the time changes. Snowflake supports using any valid IANA time zone identifier in the cron expression for a task. This allows the task to run according to the local time of the specified time zone, which may include daylight savings time adjustments. For example, a task that uses Europe/London as the time zone will run one hour earlier or later when the local time switches between GMT and BST12.
Snowflake Documentation: Scheduling Tasks
Snowflake Community: Do the timezones used in scheduling tasks in Snowflake adhere to daylight savings?
NEW QUESTION # 50
A user can change object parameters using which of the following roles?
- A. SECURITYADMIN, USER with PRIVILEGE
- B. SYSADMIN, SECURITYADMIN
- C. ACCOUNTADMIN, SECURITYADMIN
- D. ACCOUNTADMIN, USER with PRIVILEGE
Answer: D
Explanation:
Explanation
According to the Snowflake documentation, object parameters are parameters that can be set on individual objects such as databases, schemas, tables, and stages. Object parameters can be set by users with the appropriate privileges on the objects. For example, to set the object parameter AUTO_REFRESH on a table, the user must have the MODIFY privilege on the table. The ACCOUNTADMIN role has the highest level of privileges on all objects in the account, so it can set any object parameter on any object. However, other roles, such as SECURITYADMIN or SYSADMIN, do not have the same level of privileges on all objects, so they cannot set object parameters on objects they do not own or have the required privileges on. Therefore, the correct answer is C. ACCOUNTADMIN, USER with PRIVILEGE.
References:
* Parameters | Snowflake Documentation
* Object Parameters | Snowflake Documentation
* Object Privileges | Snowflake Documentation
NEW QUESTION # 51
An Architect needs to design a Snowflake account and database strategy to store and analyze large amounts of structured and semi-structured dat a. There are many business units and departments within the company. The requirements are scalability, security, and cost efficiency.
What design should be used?
- A. Use Snowflake's data lake functionality to store and analyze all data in a central location, without the need for structured schemas or indexes
- B. Set up separate Snowflake accounts and databases for each department or business unit, to ensure data isolation and security.
- C. Create a single Snowflake account and database for all data storage and analysis needs, regardless of data volume or complexity.
- D. Use a centralized Snowflake database for core business data, and use separate databases for departmental or project-specific data.
Answer: D
Explanation:
The best design to store and analyze large amounts of structured and semi-structured data for different business units and departments is to use a centralized Snowflake database for core business data, and use separate databases for departmental or project-specific data. This design allows for scalability, security, and cost efficiency by leveraging Snowflake's features such as:
Database cloning: Cloning a database creates a zero-copy clone that shares the same data files as the original database, but can be modified independently. This reduces storage costs and enables fast and consistent data replication for different purposes.
Database sharing: Sharing a database allows granting secure and governed access to a subset of data in a database to other Snowflake accounts or consumers. This enables data collaboration and monetization across different business units or external partners.
Warehouse scaling: Scaling a warehouse allows adjusting the size and concurrency of a warehouse to match the performance and cost requirements of different workloads. This enables optimal resource utilization and flexibility for different data analysis needs. Reference: Snowflake Documentation: Database Cloning, Snowflake Documentation: Database Sharing, [Snowflake Documentation: Warehouse Scaling]
NEW QUESTION # 52
What are some of the characteristics of result set caches? (Choose three.)
- A. The data stored in the result cache will contribute to storage costs.
- B. Time Travel queries can be executed against the result set cache.
- C. The retention period can be reset for a maximum of 31 days.
- D. The result set cache is not shared between warehouses.
- E. Snowflake persists the data results for 24 hours.
- F. Each time persisted results for a query are used, a 24-hour retention period is reset.
Answer: D,E,F
Explanation:
In Snowflake, the characteristics of result set caches include persistence of data results for 24 hours (B), each use of persisted results resets the 24-hour retention period (C), and result set caches are not shared between different warehouses (F). The result set cache is specifically designed to avoid repeated execution of the same query within this timeframe, reducing computational overhead and speeding up query responses. These caches do not contribute to storage costs, and their retention period cannot be extended beyond the default duration nor up to 31 days, as might be misconstrued.
Reference: Snowflake Documentation on Result Set Caching.
NEW QUESTION # 53
How do Snowflake databases that are created from shares differ from standard databases that are not created from shares? (Choose three.)
- A. Shared databases will have the PUBLIC or INFORMATION_SCHEMA schemas without explicitly granting these schemas to the share.
- B. Shared databases cannot be cloned.
- C. Shared databases are read-only.
- D. Shared databases can also be created as transient databases.
- E. Shared databases are not supported by Time Travel.
- F. Shared databases must be refreshed in order for new data to be visible.
Answer: B,C,E
Explanation:
According to the SnowPro Advanced: Architect documents and learning resources, the ways that Snowflake databases that are created from shares differ from standard databases that are not created from shares are:
* Shared databases are read-only. This means that the data consumers who access the shared databases cannot modify or delete the data or the objects in the databases. The data providers who share the databases have full control over the data and the objects, and can grant or revoke privileges on them1.
* Shared databases cannot be cloned. This means that the data consumers who access the shared databases cannot create a copy of the databases or the objects in the databases. The data providers who share the databases can clone the databases or the objects, but the clones are not automatically shared2.
* Shared databases are not supported by Time Travel. This means that the data consumers who access the shared databases cannot use the AS OF clause to query historical data or restore deleted data. The data providers who share the databases can use Time Travel on the databases or the objects, but the historical
* data is not visible to the data consumers3.
The other options are incorrect because they are not ways that Snowflake databases that are created from shares differ from standard databases that are not created from shares. Option B is incorrect because shared databases do not need to be refreshed in order for new data to be visible. The data consumers who access the shared databases can see the latest data as soon as the data providers update the data1. Option E is incorrect because shared databases will not have the PUBLIC or INFORMATION_SCHEMA schemas without explicitly granting these schemas to the share. The data consumers who access the shared databases can only see the objects that the data providers grant to the share, and the PUBLIC and INFORMATION_SCHEMA schemas are not granted by default4. Option F is incorrect because shared databases cannot be created as transient databases. Transient databases are databases that do not support Time Travel or Fail-safe, and can be dropped without affecting the retention period of the data. Shared databases are always created as permanent databases, regardless of the type of the source database5. References: Introduction to Secure Data Sharing | Snowflake Documentation, Cloning Objects | Snowflake Documentation, Time Travel | Snowflake Documentation, Working with Shares | Snowflake Documentation, CREATE DATABASE | Snowflake Documentation
NEW QUESTION # 54
A healthcare company is deploying a Snowflake account that may include Personal Health Information (PHI).
The company must ensure compliance with all relevant privacy standards.
Which best practice recommendations will meet data protection and compliance requirements? (Choose three.)
- A. Use the Internal Tokenization feature to obfuscate sensitive data.
- B. Rewrite SQL queries to eliminate projections of PHI data based on current_role().
- C. Create Dynamic Data Masking policies and apply them to columns that contain PHI.
- D. Use, at minimum, the Business Critical edition of Snowflake.
- E. Use the External Tokenization feature to obfuscate sensitive data.
- F. Avoid sharing data with partner organizations.
Answer: C,D,E
Explanation:
* A healthcare company that handles PHI data must ensure compliance with relevant privacy standards, such as HIPAA, HITRUST, and GDPR. Snowflake provides several features and best practices to help customers meet their data protection and compliance requirements1.
* One best practice recommendation is to use, at minimum, the Business Critical edition of Snowflake. This edition provides the highest level of data protection and security, including end-to-end encryption with customer-managed keys, enhanced object-level security, and HIPAA and HITRUST compliance2. Therefore, option A is correct.
* Another best practice recommendation is to create Dynamic Data Masking policies and apply them to columns that contain PHI. Dynamic Data Masking is a feature that allows masking or redacting sensitive data based on the current user's role. This way, only authorized users can view the unmasked data, while others will see masked values, such as NULL, asterisks, or random characters3. Therefore, option B is correct.
* A third best practice recommendation is to use the External Tokenization feature to obfuscate sensitive data. External Tokenization is a feature that allows replacing sensitive data with tokens that are generated and stored by an external service, such as Protegrity. This way, the original data is never stored or processed by Snowflake, and only authorized users can access the tokenized data through the external service4. Therefore, option D is correct.
* Option C is incorrect, because the Internal Tokenization feature is not available in Snowflake. Snowflake does not provide any native tokenization functionality, but only supports integration with external tokenization services4.
* Option E is incorrect, because rewriting SQL queries to eliminate projections of PHI data based on current_role() is not a best practice. This approach is error-prone, inefficient, and hard to maintain. A better alternative is to use Dynamic Data Masking policies, which can automatically mask data based on the user's role without modifying the queries3.
* Option F is incorrect, because avoiding sharing data with partner organizations is not a best practice.
Snowflake enables secure and governed data sharing with internal and external consumers, such as business units, customers, or partners. Data sharing does not involve copying or moving data, but only granting access privileges to the shared objects. Data sharing can also leverage Dynamic Data Masking and External Tokenization features to protect sensitive data5.
Snowflake's Security & Compliance Reports : Snowflake Editions : Dynamic Data Masking : External Tokenization : Secure Data Sharing
NEW QUESTION # 55
Two queries are run on the customer_address table:
create or replace TABLE CUSTOMER_ADDRESS ( CA_ADDRESS_SK NUMBER(38,0),
CA_ADDRESS_ID VARCHAR(16), CA_STREET_NUMBER VARCHAR(IO) CA_STREET_NAME
VARCHAR(60), CA_STREET_TYPE VARCHAR(15), CA_SUITE_NUMBER VARCHAR(10), CA_CITY VARCHAR(60), CA_COUNTY VARCHAR(30), CA_STATE VARCHAR(2), CA_ZIP VARCHAR(10), CA_COUNTRY VARCHAR(20), CA_GMT_OFFSET NUMBER(5,2), CA_LOCATION_TYPE VARCHAR(20) ); ALTER TABLE DEMO_DB.DEMO_SCH.CUSTOMER_ADDRESS ADD SEARCH OPTIMIZATION ON SUBSTRING(CA_ADDRESS_ID); Which queries will benefit from the use of the search optimization service? (Select TWO).
- A. select*fromDEMO_DB.DEMO_SCH.CUSTOMER_ADDRESSWhereCA_ADDRESS_IDNOT LIKE
'%AAAAAAAAPHPPL%'; - B. select*fromDEMO_DB.DEMO_SCH.CUSTOMER_ADDRESSWhereCA_ADDRESS_IDLIKE
'%PHPP%'; - C. select*fromDEMO_DB.DEMO_SCH.CUSTOMER_ADDRESSWhereCA_ADDRESS_IDLIKE
'%BAAASKD%'; - D. select * from DEMO_DB.DEMO_SCH.CUSTOMER_ADDRESS Where CA_ADDRESS_ID= substring('AAAAAAAAPHPPLBAAASKDJHASLKDJHASKJD',1,16);
- E. select * from DEMO_DB.DEMO_SCH.CUSTOMER_ADDRESS Where
substring(CA_ADDRESS_ID,1,8)=
substring('AAAAAAAAPHPPLBAAASKDJHASLKDJHASKJD',1,8);
Answer: D,E
Explanation:
The use of the search optimization service in Snowflake is particularly effective when queries involve operations that match exact substrings or start from the beginning of a string. The ALTER TABLE command adding search optimization specifically for substrings on the CA_ADDRESS_ID field allows the service to create an optimized search path for queries using substring matches.
* Option A benefits because it directly matches a substring from the start of the CA_ADDRESS_ID, aligning with the optimization's capability to quickly locate records based on the beginning segments of strings.
* Option B also benefits, despite performing a full equality check, because it essentially compares the full length of CA_ADDRESS_ID to a substring, which can leverage the substring index for efficient
* retrieval.Options C, D, and E involve patterns that do not start from the beginning of the string or use negations, which are not optimized by the search optimization service configured for starting substring matches.References: Snowflake's documentation on the use of search optimization for substring matching in SQL queries.
NEW QUESTION # 56
How can an Architect enable optimal clustering to enhance performance for different access paths on a given table?
- A. Create super projections that will automatically create clustering.
- B. Create multiple clustering keys for a table.
- C. Create a clustering key that contains all columns used in the access paths.
- D. Create multiple materialized views with different cluster keys.
Answer: D
NEW QUESTION # 57
......
Dumps Real Snowflake ARA-C01 Exam Questions [Updated 2026]: https://braindumps.exam4docs.com/ARA-C01-study-questions.html
