ExamGecko
Question list
Search
Search

Question 608 - COF-C02 discussion

Report
Export

What happens to the privileges granted to Snowflake system-defined roles?

A.
The privileges cannot be revoked.
Answers
A.
The privileges cannot be revoked.
B.
The privileges can be revoked by an ACCOUNTADMIN.
Answers
B.
The privileges can be revoked by an ACCOUNTADMIN.
C.
The privileges can be revoked by an orgadmin.
Answers
C.
The privileges can be revoked by an orgadmin.
D.
The privileges can be revoked by any user-defined role with appropriate privileges.
Answers
D.
The privileges can be revoked by any user-defined role with appropriate privileges.
Suggested answer: A

Explanation:

The privileges granted to Snowflake's system-defined roles cannot be revoked. System-defined roles, such as SYSADMIN, ACCOUNTADMIN, SECURITYADMIN, and others, come with a set of predefined privileges that are essential for the roles to function correctly within the Snowflake environment. These privileges are intrinsic to the roles and ensure that users assigned these roles can perform the necessary tasks and operations relevant to their responsibilities.

The design of Snowflake's role-based access control (RBAC) model ensures that system-defined roles have a specific set of non-revocable privileges to maintain the security, integrity, and operational efficiency of the Snowflake environment. This approach prevents accidental or intentional modification of privileges that could disrupt the essential functions or compromise the security of the Snowflake account.

References:

Snowflake Documentation on Access Control: Understanding Role-Based Access Control (RBAC)

asked 23/09/2024
DIEGO MORENO
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first