ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 3 - ADA-C01 discussion

Report
Export

A Snowflake Administrator created a role ROLE_MANAGED_ACCESS and a schema SCHEMA_MANAGED_ACCESS as follows:

USE ROLE SECURITYADMIN;

CREATE ROLE ROLE_MANAGED_ACCESS;

GRANT ROLE ROLE_MANAGED_ACCESS TO ROLE SYSADMIN;

GRANT USAGE ON WAREHOUSE COMPUTE_WH TO ROLE ROLE_MANAGED_ACCESS;

GRANT ALL privileges ON DATABASE WORK TO ROLE ROLE_MANAGED_ACCESS;

USE ROLE ROLE_MANAGED_ACCESS;

CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITH MANAGED ACCESS;

USE ROLE SECURITYADMIN;

GRANT SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA MANAGED ACCESS to ROLE_MANAGED_ACCESS;

The Administrator now wants to disable the managed access on the schema.

How can this be accomplished?

A.
ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;
Answers
A.
ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;
B.
USE ROLE ROLE MANAGED_ACCESS; DROP SCHEMA WORK. SCHEMA_MANAGED_ACCESS; CREATE SCHEMA SCHEMA_MANAGED_ACCESS; Then recreate all needed objects.
Answers
B.
USE ROLE ROLE MANAGED_ACCESS; DROP SCHEMA WORK. SCHEMA_MANAGED_ACCESS; CREATE SCHEMA SCHEMA_MANAGED_ACCESS; Then recreate all needed objects.
C.
REVOKE SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA_MANAGED_ACCESS FROM ROLE_MANAGED_ACCESS; ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;
Answers
C.
REVOKE SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA_MANAGED_ACCESS FROM ROLE_MANAGED_ACCESS; ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;
D.
USE ROLE ROLE_MANAGED_ACCESS; DROP SCHEMA WORK. SCHEMA MANAGED_ACCESS; CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITHOUT MANAGED ACCESS; Then recreate all needed objects.
Answers
D.
USE ROLE ROLE_MANAGED_ACCESS; DROP SCHEMA WORK. SCHEMA MANAGED_ACCESS; CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITHOUT MANAGED ACCESS; Then recreate all needed objects.
Suggested answer: A

Explanation:

According to the Snowflake documentation1, you can change a managed access schema to a regular schema using the ALTER SCHEMA statement with the DISABLE MANAGED ACCESS keywords. This will disable the managed access feature on the schema and revert the access control to the default behavior. Option B is incorrect because dropping and recreating the schema will also delete all the objects and metadata in the schema, which is not necessary to disable the managed access. Option C is incorrect because revoking the privileges on the future tables from the role is not required to disable the managed access. Option D is incorrect because there is no WITHOUT MANAGED ACCESS option in the CREATE SCHEMA statement.

asked 23/09/2024
Robert Thompson
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first