ExamGecko
Question list
Search
Search

Question 575 - COF-C02 discussion

Report
Export

What information is stored in the ACCESS_HlSTORY view?

A.
History of the files that have been loaded into Snowflake
Answers
A.
History of the files that have been loaded into Snowflake
B.
Names and owners of the roles that are currently enabled in the session
Answers
B.
Names and owners of the roles that are currently enabled in the session
C.
Query details such as the objects included and the user who executed the query
Answers
C.
Query details such as the objects included and the user who executed the query
D.
Details around the privileges that have been granted for all objects in an account
Answers
D.
Details around the privileges that have been granted for all objects in an account
Suggested answer: D

Explanation:

Details around the privileges that have been granted for all objects in an account. The ACCESS_HISTORY view in Snowflake provides a comprehensive log of access control changes, including grants and revocations of privileges on all securable objects within the account. This information is crucial for auditing and monitoring the security posture of your Snowflake environment.

Here's how to understand and use the ACCESS_HISTORY view:

Purpose of ACCESS_HISTORY View: It is designed to track changes in access controls, such as when a user or role is granted or revoked privileges on various Snowflake objects. This includes tables, schemas, databases, and more.

Querying ACCESS_HISTORY: To access this view, you can use the following SQL query pattern:

SELECT * FROM SNOWFLAKE.ACCOUNT_USAGE.ACCESS_HISTORY WHERE EVENT_TYPE = 'GRANT' OR EVENT_TYPE = 'REVOKE';

Interpreting the Results: The results from the ACCESS_HISTORY view include the object type, the specific privilege granted or revoked, the grantee (who received or lost the privilege), and the timestamp of the event. This data is invaluable for audits and compliance checks.

asked 23/09/2024
Marius Blaauw
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first